Because Xsan is simply another file system, it adheres to the file system permissions built into Mac OS X, including permissions established in a central LDAP directory. Whether you use Open Directory, Active Directory, or another enterprise LDAP service,
Xsan accesses information in the directory accounts that you have in placemaking it easy to share permissions across computers.
You can use Xsan administration tools to set user and group permissions, as well as
access privileges, at several levels:
Restrict user access to folders on a volume by specifying owner, group, and general
access permissions.
Unmount a SAN volume from selected client computers.
Restrict a client computer to read-only access to a volume.
Remove a client from a SAN.