Choosing User Accounts to Run Watchfolder Services

Watchfolder services must be run under a user with access to every area of your file system in which you intend to create a watch folder. Watchfolders allows you to run multiple instances of these services under different users. Most users run these services under one user. Choose a user that has access to your entire file system.

You may need to run multiple instances of these services to access every area of your file system. For example, your file system may include mounted storage from the marketing department and another from the release team. In such a scenario, you may not have a single user that can access files in both mounted storages, or your administrative account has access to the entire file system, but your policy prohibits running the asperawatchd and asperawatchfolderd services under that user account.

There are two ways to configure watch folders depending on your scenario. See the chart below for the configuration that matches your scenario:

Configuration #1

This is the simplest and most common configuration of watchfolder services. Choose an account that has read permissions for all your files and follow the instructions in Creating a Watch Folder.

Configuration #2

If you cannot run watchfolder services under the administrative account or you do not have a single user that has access to the entire file system, you must run pairs of asperawatchd and asperawatchfolderd services under enough users to access your entire file system.

For example, if you have user mounted storage from the marketing department that can only be accessed by user xasp1, and another storage from the release team, which can only be accessed by user xasp2, you need to run a pair of asperawatchd and asperawatchfolderd services under each user. Aspera recommends using the Node API to configure services and manage watch folders in a multi-user context. You can interact with the Node API using IBM Aspera Console or using curl commands from the command line.

For more information on using Watchfolders with Console, see the IBM Aspera Console Admin Guide: Working with Watchfolders.