> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nx1cloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Grant a role access to a storage location

> Grant a role access to a storage location to control who can read or write its files.

Granting a role access to a storage location gives the role an access level to a path in an object storage bucket.
For example, you can give the `nx1_ingest` role the **Read** level on a folder, so it can read the files that you
ingest from it.

## Prerequisites

Before starting this task, ensure you have the following:

Required roles: `nx1_migration_admin` or `nx1_migration_ops`.

## Grant a role access to a storage location

> [tab] Web portal
>
> Perform these steps to grant a role access to a storage location.
>
> 1. Log in to NexusOne.
>
> 2. On the top navigation bar, hover your mouse over **Govern** and then select **Data Access**.
>
> 3. Click the **Grant access** tab.
>
> 4. Under **Who**, in the **Groups** field, select the role to give access to. Roles appear as groups.
>
> 5. Optional: In the **Users** field, select the users to give access to.
>
> 6. Under **On what**, click **Storage location**.
>
> 7. Select the location:
>
>    * **Bucket**: Select a bucket to fill in the **Location** field with the bucket's path. This field appears
>      only when NexusOne lists your buckets.
>    * **Location**: Enter the path, such as `s3a://bucket/path/`. If you selected a bucket, then add the
>      folder after it. If you didn't, then enter the full path.
>    * **This folder and everything in it**: Turn it on to include every file below the path.
>
> 8. Under **Access level**, select **Read** or **Write**. Storage locations offer only these two levels. For what
>    each level includes, refer to [Access levels](https://docs.nx1cloud.com/documentation/govern/overview.md#access-levels).
>
> 9. Optional: In the **Why** field, enter who asked for the access and what it is for.
>
> 10. Click **Preview** to see the policies the grant writes and whose access changes.
>
> 11. Click **Apply**.

> [tab] REST API
>
> Use the following API endpoints to:
>
> * [List access levels](https://docs.nx1cloud.com/api-reference/endpoints/data-access/list-access-levels-and-the-ranger-access-types-behind-each.md).
> * [Preview a grant](https://docs.nx1cloud.com/api-reference/endpoints/data-access/preview-a-grant:-the-policies-it-writes-and-whose-access-changes.md).
> * [Apply a grant](https://docs.nx1cloud.com/api-reference/endpoints/data-access/apply-a-grant.md) with a storage location as the target.

## Additional resources

* For an overview of the Govern feature, refer to [Govern Overview](https://docs.nx1cloud.com/documentation/govern/overview.md).
* You can also grant this access directly in Ranger. For the steps, refer to
  [Create a policy](https://docs.nx1cloud.com/platform-components/apache-ranger/ranger-hands-on-examples.md#create-a-policy).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.