|
| 1 | +--- |
| 2 | +title: Understand default and individual user and group quotas for Azure NetApp Files volumes | Microsoft Docs |
| 3 | +description: Helps you understand the use cases of managing default and individual user and group quotas for Azure NetApp Files volumes. |
| 4 | +services: azure-netapp-files |
| 5 | +documentationcenter: '' |
| 6 | +author: b-hchen |
| 7 | +manager: '' |
| 8 | +editor: '' |
| 9 | + |
| 10 | +ms.assetid: |
| 11 | +ms.service: azure-netapp-files |
| 12 | +ms.workload: storage |
| 13 | +ms.tgt_pltfrm: na |
| 14 | +ms.topic: conceptual |
| 15 | +ms.date: 02/23/2023 |
| 16 | +ms.author: anfdocs |
| 17 | +--- |
| 18 | +# Understand default and individual user and group quotas |
| 19 | + |
| 20 | +User and group quotas enable you to restrict the logical space that a user or group can consume in a volume. User and group quotas apply to a specific Azure NetApp Files volume. |
| 21 | + |
| 22 | +## Introduction |
| 23 | + |
| 24 | +You can restrict user capacity consumption on Azure NetApp Files volumes by setting user and/or group quotas on volumes. User and group quotas differ from volume quotas in the way that they further restrict volume capacity consumption at the user and group level. |
| 25 | + |
| 26 | +To set a [volume quota](volume-quota-introduction.md), you can use the Azure portal or the Azure NetApp Files API to specify the maximum storage capacity for a volume. Once you set the volume quota, it defines the size of the volume, and there's no restriction on how much capacity any user can consume. |
| 27 | + |
| 28 | +To restrict users’ capacity consumption, you can set a user and/or group quota. You can set default and/or individual quotas. Once you set user or group quotas, users can't store more data in the volume than the specified user or group quota limit. |
| 29 | + |
| 30 | +By combining volume and user quotas, you can ensure that storage capacity is distributed efficiently and prevent any single user, or group of users, from consuming excessive amounts of storage. |
| 31 | + |
| 32 | +To understand considerations and manage user and group quotas for Azure NetApp Files volumes, see [Manage default and individual user and group quotas for a volume](manage-default-individual-user-group-quotas.md). |
| 33 | + |
| 34 | +## Behavior of default and individual user and group quotas |
| 35 | + |
| 36 | +This section describes the behavior of user and group quotas. |
| 37 | + |
| 38 | +The following concepts and behavioral aspects apply to user and group quotas: |
| 39 | +* The volume capacity that can be consumed can be restricted at the user and/or group level. |
| 40 | + * User quotas are available for SMB, NFS, and dual-protocol volumes. |
| 41 | + * Group quotas are **not** supported on SMB and dual-protocol volumes. |
| 42 | +* When a user or group consumption reaches the maximum configured quota, further space consumption is prohibited. |
| 43 | +* Individual user quota takes precedence over default user quota. |
| 44 | +* Individual group quota takes precedence over default group quota. |
| 45 | +* If you set group quota and user quota, the most restrictive quota is the effective quota. |
| 46 | + |
| 47 | +The following subsections describe and depict the behavior of the various quota types. |
| 48 | + |
| 49 | +### Default user quota |
| 50 | + |
| 51 | +A default user quota automatically applies a quota limit to *all users* accessing the volume without creating separate quotas for each target user. Each user can only consume the amount of storage as defined by the default user quota setting. No single user can exhaust the volume’s capacity, as long as the default user quota is less than the volume quota. The following diagram depicts this behavior. |
| 52 | + |
| 53 | +:::image type="content" source="../media/azure-netapp-files/default-user-quota.png" alt-text="Diagram showing behavior of default user quota."::: |
| 54 | + |
| 55 | +### Individual user quota |
| 56 | + |
| 57 | +An individual user quota applies a quota to *individual target user* accessing the volume. You can specify the target user by a UNIX user ID (UID) or a Windows security identifier (SID), depending on volume protocol (NFS or SMB). You can define multiple individual user quota settings on a volume. Each user can only consume the amount of storage as defined by their individual user quota setting. No single user can exhaust the volume’s capacity, as long as the individual user quota is less than the volume quota. Individual user quotas override a default user quota, where applicable. The following diagram depicts this behavior. |
| 58 | + |
| 59 | +:::image type="content" source="../media/azure-netapp-files/individual-user-quota.png" alt-text="Diagram showing behavior of individual user quota."::: |
| 60 | + |
| 61 | +### Combining default and individual user quotas |
| 62 | + |
| 63 | +You can create quota exceptions for specific users by allowing those users less or more capacity than a default user quota setting by combining default and individual user quota settings. In the following example, individual user quotas are set for `user1`, `user2`, and `user3`. Any other user is subjected to the default user quota setting. The individual quota settings can be smaller or larger than the default user quota setting. The following diagram depicts this behavior. |
| 64 | + |
| 65 | +:::image type="content" source="../media/azure-netapp-files/combine-default-individual-user-quota.png" alt-text="Diagram showing behavior when you combine default and individual user quotas."::: |
| 66 | + |
| 67 | +### Default group quota |
| 68 | + |
| 69 | +A default group quota automatically applies a quota limit to *all users within all groups* accessing the volume without creating separate quotas for each target group. The total consumption for all users in any group can't exceed the group quota limit. Group quotas aren’t applicable to SMB and dual-protocol volumes. A single user can potentially consume the entire group quota. The following diagram depicts this behavior. |
| 70 | + |
| 71 | +:::image type="content" source="../media/azure-netapp-files/default-group-quota.png" alt-text="Diagram showing behavior of default group quota."::: |
| 72 | + |
| 73 | +### Individual group quota |
| 74 | + |
| 75 | +An individual group quota applies a quota to *all users within an individual target group* accessing the volume. The total consumption for all users *in that group* can't exceed the group quota limit. Group quotas aren’t applicable to SMB and dual-protocol volumes. You specify the group by a UNIX group ID (GID). Individual group quotas override default group quotas where applicable. The following diagram depicts this behavior. |
| 76 | + |
| 77 | +:::image type="content" source="../media/azure-netapp-files/individual-group-quota.png" alt-text="Diagram showing behavior of individual group quota."::: |
| 78 | + |
| 79 | +### Combining individual and default group quota |
| 80 | + |
| 81 | +You can create quota exceptions for specific groups by allowing those groups less or more capacity than a default group quota setting by combining default and individual group quota settings. Group quotas aren’t applicable to SMB and dual-protocol volumes. In the following example, individual group quotas are set for `group1` and `group2`. Any other group is subjected to the default group quota setting. The individual group quota settings can be smaller or larger than the default group quota setting. The following diagram depicts this scenario. |
| 82 | + |
| 83 | +:::image type="content" source="../media/azure-netapp-files/combine-default-individual-group-quota.png" alt-text="Diagram showing behavior when you combine default and individual group quotas."::: |
| 84 | + |
| 85 | +### Combining default and individual user and group quotas |
| 86 | + |
| 87 | +You can combine the various previously described quota options to achieve very specific quota definitions. You can create very specific quota definitions by (optionally) starting with defining a default group quota, followed by individual group quotas matching your requirements. Then you can further tighten individual user consumption by first (optionally) defining a default user quota, followed by individual user quotas matching individual user requirements. Group quotas aren’t applicable to SMB and dual-protocol volumes. In the following example, a default group quota has been set as well as individual group quotas for `group1` and `group2`. Furthermore, a default user quota has been set as well as individual quotas for `user1`, `user2`, `user3`, `user5`, and `userZ`. The following diagram depicts this scenario. |
| 88 | + |
| 89 | +:::image type="content" source="../media/azure-netapp-files/combine-default-individual-user-group-quota.png" alt-text="Diagram showing behavior when you combine default and individual user and group quotas."::: |
| 90 | + |
| 91 | +## Observing user quota settings and consumption |
| 92 | + |
| 93 | +Users can observe user quota settings and consumption from their client systems connected to the NFS, SMB, or dual-protocol volumes respectively. Azure NetApp Files currently doesn't support reporting of group quota settings and consumption explicitly. The following sections describe how users can view their user quota setting and consumption. |
| 94 | + |
| 95 | +### Windows client |
| 96 | + |
| 97 | +Windows users can observe their user quota and consumption in Windows Explorer and by running the dir command. Assume a scenario where a 2-TiB volume with a 100-MiB default or individual user quota has been configured. On the client, this scenario is represented as follows: |
| 98 | + |
| 99 | +* Administrator view: |
| 100 | + |
| 101 | + :::image type="content" source="../media/azure-netapp-files/user-quota-administrator-view.png" alt-text="Screenshot showing administrator view of user quota and consumption."::: |
| 102 | + |
| 103 | +* User view: |
| 104 | + |
| 105 | + :::image type="content" source="../media/azure-netapp-files/user-quota-user-view.png" alt-text="Screenshot showing user view of user quota and consumption."::: |
| 106 | + |
| 107 | +### Linux client |
| 108 | + |
| 109 | +Linux users can observe their *user* quota and consumption by using the [`quota(1)`](https://man7.org/linux/man-pages/man1/quota.1.html) command. Assume a scenario where a 2-TiB volume with a 100-MiB default or individual user quota has been configured. On the client, this scenario is represented as follows: |
| 110 | + |
| 111 | +:::image type="content" source="../media/azure-netapp-files/user-quota-linux-view.png" alt-text="Example showing how to use the quota command."::: |
| 112 | + |
| 113 | +Azure NetApp Files currently doesn't support group quota reporting. However, you know you've reached your group’s quota limit when you receive a `Disk quota exceeded` error in writing to the volume while you haven’t reached your user quota yet. |
| 114 | + |
| 115 | +In the following scenario, users `user4` and `user5` are members of `group2`. The group `group2` has a 200-MiB default or individual group quota assigned. The volume is already populated with 150 MiB of data owned by user `user4`. User `user5` appears to have a 100-MiB quota available as reported by the `quota(1)` command, but `user5` can’t consume more than 50 MiB due to the remaining group quota for `group2`. User `user5` receives a `Disk quota exceeded` error message after writing 50 MiB, despite not reaching the user quota. |
| 116 | + |
| 117 | +:::image type="content" source="../media/azure-netapp-files/exceed-disk-quota.png" alt-text="Example showing a scenario of exceeding disk quota."::: |
| 118 | + |
| 119 | +> [!IMPORTANT] |
| 120 | +> For quota reporting to work, the client needs access to port 4049/UDP on the Azure NetApp Files volumes’ storage endpoint. When using NSGs with standard network features on the Azure NetApp Files delegated subnet, make sure that access is enabled. |
| 121 | +
|
| 122 | +## Next steps |
| 123 | + |
| 124 | +* [Manage default and individual user and group quotas for a volume](manage-default-individual-user-group-quotas.md) |
| 125 | +* [Resource limits for Azure NetApp Files](azure-netapp-files-resource-limits.md) |
| 126 | +* [Security identifiers](/windows-server/identity/ad-ds/manage/understand-security-identifiers) |
0 commit comments