It is correct that it is NOT possible for s3 subusers to have different permissions on folders created by the parent account? Thus the --access=[ read | write | readwrite | full ] is for everything the parent has created, and it is not possible to change that for specific folders/buckets? radosgw-admin subuser create --uid='Company$archive' --subuser=testuser --key-type=s3 Thus if archive created this bucket/folder structure. └── bucket ├── folder1 ├── folder2 └── folder3 └── folder4 It is not possible to allow testuser to only write in folder2? _______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com