# Elasticsearch snapshot repo permissions **URL:** \ **Category:** Elasticsearch\ **Created:** [October 27, 2017, 6:34pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601 "2017-10-27T18:34:29Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Maekee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maekee/32/21708_2.png) [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Post date:** [October 27, 2017, 6:34pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601/1 "2017-10-27T18:34:30Z")
Hi, I am going to create a snapshot repo in a UNC share. (WIndows Servers) What should i give permission on the network share? I dont use any service account for Elasticsearch. I have given the computer accounts for ES-nodes full share permissions but it says permission denied. When i give full access for everyone, it works.. but i dont want to give full access to everyone. Reason: could not read repository data from index blob ---
**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\ **Post date:** [October 27, 2017, 11:25pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601/2 "2017-10-27T23:25:41Z")
The account(s) that you run elasticsearch under should be able to read, write and list files in this share on all data and master nodes, perhaps on some nodes you run elasticsearch under a different account? ---
**Author:** ![Maekee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maekee/32/21708_2.png) [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Post date:** [November 2, 2017, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601/3 "2017-11-02T07:28:05Z")
I am not running ES under any specific service account, just SYSTEM (Windows). So that should mean the AD computer accounts, which is not enough. ---
**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\ **Post date:** [November 2, 2017, 2:09pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601/4 "2017-11-02T14:09:59Z")
So, that account (whatever it is) needs to read, write and list files on the share. ---
**Author:** ![Maekee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maekee/32/21708_2.png) [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Post date:** [November 15, 2017, 1:21pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601/5 "2017-11-15T13:21:28Z")
But the Share is located on another machine, dont seem to help to give the computer accounts for the ES-machine permissions. Am stuck here because i dont want to give everyone full access to the snapshot repo. !??! 😢 ---
**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\ **Post date:** [November 15, 2017, 4:39pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601/6 "2017-11-15T16:39:09Z")
Maybe you can change the user that you run Elasticseach under then to something that is known to both the machine you are running Elasticseach on and the machine where the share is located? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 13, 2017, 4:39pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repo-permissions/105601/7 "2017-12-13T16:39:28Z")
Closed on December 13, 2017, 4:39pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.