Add AD groups to filesystem ACL

[Djoez]

Hi,
We have set up a Truenas Scale 22.02.2 with AD integration. Pool created, dataset made and shares configured.
Share ACL set as default to everyone full permissions. So far, so good.

Now we want to set the following Filesystem permissions:
AD_group_DATA_adm > Read-Write-eXecute
AD_group_APP_adm > Read-Write-eXecute
AD_group_APP_user > Read-eXecute

The first group is added without any problems by setting "owner group" to the required group in the ACL editor.
But when we try to add a group by "Add Item" set "Who" to group and select the required group we get an error trying to save the ACL.

[EINVAL] filesystem_acl.dacl: Named (user or group) POSIX.ACL entries require a mask entry to be present in the ACL

I assume we need to make somekind of a mask entry prior to the group entry but can someone tell me what the values should be for that mask entry?
In a mask entry we cannot provide any group we need to add

 

[anodos]

There is an open enhancement request to improve the UX for this in the GUI. Hopefully will be in 22.12.

Just add a MASK entry. MASK defines the maximum permissions that may be granted to named entries.

Do note that you'll need both default and non-default entries. Default entries (checkbox) define the permissions that will be applied to files / folders underneath the path in question as well as what will be set on new objects created. Non-default entries apply directly to the dataset mountpoint.

 

[Djoez]

tnx, thats helpfull