Create and manage file server accounts

A file server account gives one account-holder isolated SFTP access to a single Celigo Storage folder. Each account has a username, a home folder, a set of permissions that control what the account-holder can do in that folder, and one or more credentials — a password, SSH public keys, or both. This article explains who can administer accounts, and how to create, edit, disable, and delete them. Create one account per account-holder, and one per direction of traffic if you want to isolate inbound and outbound files — for example, acme-inbound and acme-outbound. Isolated accounts let you revoke one account-holder's access without affecting others and keep each account-holder's files in a folder your flows can target directly.

Who can administer file server accounts

Who can create, edit, disable, and delete a file server account depends on where its home folder is:

• Account owners and administrators can administer every file server account in the environment, wherever its home folder is.
• Users with Manage access to an integration can administer any account whose home folder is that integration's system folder or any folder beneath it. This includes users whose role is Manage all and custom-role users with Manage access to that specific integration (see Manage user roles & permissions to an account).
• An account whose home folder is outside every integration system folder — for example, in a folder you created at the storage root — can be administered only by owners and administrators. Manage all access doesn't extend to these accounts.
• Server-level settings — turning the file server on or off and choosing its identifier — are always limited to owners and administrators. A user with Manage access administers accounts, never the server itself.

The home folder decides the rule, so moving an account's home folder into or out of an integration's system folder changes who can administer that account, effective immediately. When a user with Manage access creates or edits an account, the folder picker offers only folders they can manage, so they can't point an account at a folder outside their integrations. The same rules apply to the file server account API.

Users with Manage access reach the accounts the same way an owner or administrator does — Resources > File storage > SFTP file server > Accounts — and the File server accounts list shows only the accounts homed in the system folders of integrations they can manage.

Create an account

1. Select an environment.
2. Go to Resources , and then select File storage.
3. Select SFTP file server.
4. Under File server settings, select Accounts.
5. Select Create account.
6. Enter a Username. Use 3–32 lowercase letters, numbers, or hyphens, and don't start or end with a hyphen. The username must be unique on this file server. The account-holder signs in as <username>@<identifier>; the form shows the identifier suffix next to the username.
7. Under Home folder, select Browse, choose the folder this account is limited to, and then select Select folder. The account-holder can see this folder and everything inside it, and nothing above it. You can rename or move the folder later without disrupting access. To give one account-holder access to more than one folder, create more accounts.
8. Under Permissions, select the operations this account-holder needs: Read, Create, Modify, or Delete. New accounts start with Read and Create selected. For what each permission allows and common combinations, see File server account permissions.

9. Set at least one credential:

   • Enter a Password of 12–256 characters, including at least one lowercase letter, one uppercase letter, one number, and one symbol. Copy it and share it securely now — Celigo encrypts the password and never shows it again.
   • Under SSH public keys, add up to 10 keys (see Manage SSH keys for a file server account).

   An enabled account must have at least one credential. As soon as you add a key, Password is no longer required; remove every key and it is required again.

10. Select Save & close, and then send the account-holder their connection details (see Connect to a Celigo-hosted SFTP file server).

The new account appears in the File server accounts list with its username, home folder, Last connected time, and Enable account state. To see an account's permissions, select its username — the account panel shows the granted permissions as tags.

Edit, disable, or delete an account

You can change an account's home folder, permissions, and credentials after you create it, and you can disable or delete it at any time.

1. Select an environment.
2. Go to Resources , and then select File storage.
3. Select SFTP file server.
4. Under File server settings, select Accounts.
5. Find the account in the list, and then do one of the following:
   • Edit the account — Select Actions > Edit account to make your changes. Changes to the home folder and permissions take effect immediately, including for an account-holder who is already connected (see File server account permissions).
   • Replace the password — Open the account for editing, select Change password, and enter a new password. The old password stops working immediately, including for active sessions, and the account-holder must reconnect with the new one. Use this if a credential may have been exposed. If the account also has SSH keys registered, those keys keep working.
   • Make the account key-only — A password can't be removed in integrator.io. To create a key-only account, add a key and leave Password blank when you create it. Through the file server API, you can clear an existing password, but only while the account is disabled or has at least one key; clearing it ends the account's active sessions.
   • Disable the account — Turn off Enable account. The account-holder is immediately signed out and any active file transfer is canceled. The account, its permissions, and its keys are retained, and the home folder's contents are untouched. Turn it back on to restore access.
   • Delete the account — Disable the account first, then select Actions > Delete, and then confirm. The account is removed permanently. The home folder and its files remain in Celigo Storage.

To add or remove SSH keys, see Manage SSH keys for a file server account.

Every change you make to an account is recorded in the platform audit log, and the account-holder's own sign-ins and file operations are recorded in the storage activity log — see What is recorded.

How the home folder interacts with storage management

Because a home folder anchors an account-holder's access, Celigo Storage protects it:

• On the File storage page, the File server accounts column shows which accounts are homed in each folder, and the folder's Used by view lists them (see Work with files and folders in integrator.io).
• You can't delete a folder whose subtree contains any account's home folder. Move each affected account to a different home folder or disable it first. The same delete through the API or a flow step fails with an error listing the blocking accounts.
• Renaming or moving the home folder is safe — the account follows the folder, not its name or path. Moving it into or out of an integration's system folder changes who can administer the account (see Who can administer file server accounts).