---
title: "user modify"
slug: "user-modify"
tags: ["5.5"]
updated: 2026-10-27T23:00:54Z
published: 2026-10-27T23:00:54Z
canonical: "docs.vastdata.com/user-modify"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# user modify

This command modifies a user entry in the VAST provider. You can use this command to assign S3 permissions to a VAST provider user.

> [!NOTE]
> Note
> 
> For users on external providers, use [user query](/docs-5-5/docs/user-query) to grant and remove S3 user permissions.user query

#### Usage

```plaintext
user modify  --id ID
             [--uid UID]
             [--leading-group-gid LEADING_GID]
             [--groups-gids GIDs]
             [--allow-create-bucket|--disallow-create-bucket]
             [--allow-delete-bucket|--disallow-delete-bucket]
             [--s3-superuser|--not-s3-superuser]
             [--identity-policies-ids IDs]
             [--vast-provider-id ID]
             [--password PASSWORD]
```

#### Required Parameters

| `--id ID` | Specify the VAST ID of the user to be modified. |
| --- | --- |

#### Options

| `--uid UID` | Changes the UID associated with the user. > [!NOTE] > Note > > UID is an NFS user attribute that identifies each user. |
| --- | --- |
| `--leading-group-gid LEADING_GID` | Changes the leading group for the user. The leading group is the owning group of any files created by the user. If no local group with the specified GID exists, it is created. For example: `--leading-gid 44` |
| `--groups-gids GIDS` | Alters the list of groups to which the user belongs. Enter the groups IDs (GIDs) as a comma-separated list. Include all GIDs that should be associated with the user entry. > Caution > > Any GIDs that were defined in the entry previously will be removed if they are not included. For example: `--gids 5,65,102,170` |
| `--allow-create-bucket` | Allows the user to create buckets when connecting to the cluster via S3. |
| `--disallow-create-bucket` | Prohibits the user to create buckets when connecting to the cluster via S3. |
| `--allow-delete-bucket` | Allows the user to delete buckets when connecting to the cluster via S3. |
| `--disallow-delete-bucket` | Prohibits the user to delete buckets when connecting to the cluster via S3. |
| `--s3-superuser` | Grants the user S3 superuser permission, which enables the user to override S3 ACLs. > [!NOTE] > **Note** > > This is a legacy feature. VAST S3 Superuser permission is only available if it was set for a user prior to upgrade to version 5.2. |
| `--not-s3-superuser` | Removes S3 superuser permission from the user. |
| `--identity-policies-ids IDs` | Assigns one or more S3 identity policies to the user. Specify a comma-separated list of policy IDs. |
| `--vast-provider-id ID` | Specifies a VAST provider with which the tenant is associated. |
| `--password PASSWORD` | Set a temporary initial password for the user to PASSWORD. The user is requested to change the password on the first login. The password must meet the requirements configured in the VMS settings. |