MinIO Console

The Users section displays all MinIO-managed users on the deployment.

This section is not visible for deployments using an external identity manager such as Active Directory or an OIDC-compatible provider.

• Select Create User to create a new MinIO-managed user.

  You can assign groups and policies to the user during creation.

• Select a user’s row to view details for that user.

  You can view and modify the user’s assigned groups and policies.

  You can also view and manage any Service Accounts associated to the user.

The Groups section displays all groups on the MinIO deployment.

This section is not visible for deployments using an external identity manager such as Active Directory or an OIDC-compatible provider.

• Select Create Group to create a new MinIO Group.

  You can assign new users to the group during creation.

  You can assign policies to the group after creation.

• Select the group row to open the details for that group.

  You can modify the group membership from the Members view.

  You can modify the group’s assigned policies from the Policies view.

Changing a user’s group membership modifies the policies that user inherits. See Access Management for more information.

The Accounts section displays all Service Accounts associated to the authenticated user.

Service accounts support providing applications authentication credentials which inherit permissions from the “parent” user.

For deployments using an external identity manager such as Active Directory or an OIDC-compatible provider, service accounts provide a way for users to create long-lived credentials.

• You can select the service account row to view its custom policy, if one exists.

  You can create or modify the policy from this screen. Service account policies cannot exceed the permissions granted to the parent user.

• You can create a new service account by selecting the Create service account button.

  The Console auto-generates an access key and password for the account. You can override these values as necessary.

  You can set a custom policy for the service account that further restricts the permissions granted to the account.

The Console only displays the service account credentials once. You cannot change or retrieve the credentials later. To rotate credentials for an application, create a new service account and delete the old one once the application updates to using the new credentials.

The Console Dashboard section displays metrics for the MinIO deployment.

The Console depends on a configured Prometheus service to generate the detailed metrics shown above.

The default metrics view provides a high-level overview of the deployment status, including the uptime and availability of individual servers and drives.

This view requires configuring a Prometheus service to scrape the deployment metrics. See Collect MinIO Metrics Using Prometheus for complete instructions.

The Console Logs section displays server logs generated by the MinIO Deployment.

• Use the Nodes dropdown to filter logs to a subset of server nodes in the MinIO deployment.

• Use the Log Types dropdown to filter logs to a subset of log types.

• Use the Filter to apply text filters to the log results

Select the Start Logs button to begin collecting logs using the selected filters and settings.

The Audit Log section provides an interface for viewing audit logs collected by a configured PostgreSQL service.

The Audit Logging feature is configured and enabled automatically for MinIO deployments created using the MinIO Kubernetes Operator.

The Trace section provides HTTP trace functionality for a bucket or buckets on the deployment. This section provides similar functionality to mc admin trace.

You can modify the trace to show only specific trace calls. The default is to show only S3 related HTTP traces.

Select Filters to open additional filters to apply to trace output, such as restricting the Path on which the trace applies to a specific bucket or bucket prefix.

The Watch section displays S3 events as they occur on the selected bucket. This section provides similar functionality to mc watch.

The Drives section displays the healing status for a bucket. MinIO automatically heals objects and drives when it detects problems, such as drive-level corruption or a replacement drive.

The Register section provides a login form to connect your MinIO deployment to MinIO SUBNET.

After registration, you can upload your deployment health reports directly to SUBNET for reference by MinIO Engineering.

The Health section provides an interface for running a health diagnostic for the MinIO Deployment.

The resulting health report is intended for use by MinIO Engineering via MinIO SUBNET and may contain internal or private data points such as hostnames. Exercise caution before sending a health report to a third party or posting the health report in a public forum.

The Performance section provides an interface for running a performance test of the deployment. The resulting test can provide a general guideline of deployment performance under S3 GET and PUT requests.

For more complete performance testing, consider using a combination of load-testing using your staging application environments and the MinIO WARP tool.

The Profile section provides an interface for running system profiling of the deployment. The results can provide insight into the MinIO server process running on a given node.

The resulting report is intended for use by MinIO Engineering via MinIO SUBNET. Independent or third-party use of these profiles for diagnostics and remediation is done at your own risk.

The Inspect section provides an interface for capturing the erasure-coded metadata associated to an object or objects. MinIO Engineering may request this output as part of diagnostics in MinIO SUBNET.

The resulting object may be read using MinIO’s debugging tool. Independent or third-party use of the output for diagnostics or remediation is done at your own risk. You can optionally encrypt the object such that it can only be read if the generated encryption key is included as part of the debugging toolchain.

The Configuration subsection provides an interface for viewing and retrieving configuration settings for all MinIO Servers in the deployment.

The interface functionality mimics that of using mc admin config get or mc admin config set

Some configuration settings may require restarting the MinIO deployment to apply changes.

The Notifications subsection provides an interface for adding and managing bucket notification targets.

Select the Add Notification Target + button to add a new target to the deployment.

You can select an existing notification target from the list to view its details.

The Tiers subsection provides an interface for adding and managing remote tiers to support lifecycle management transition rules.

Select the Create Tier + button to add a new tier to the deployment.

You can select an existing tier from the list to view its details.

The Site Replication subsection provides an interface for adding and managing the site replication configuration for the deployment.

Configuring site replication requires that only a single site have existing buckets or objects (if any).