# ACLS for superuser do not work

**URL:** <https://kopia.discourse.group/t/acls-for-superuser-do-not-work/2163>\
**Category:** Support\
**Created:** [July 20, 2023, 8:54pm UTC](https://kopia.discourse.group/t/acls-for-superuser-do-not-work/2163 "2023-07-20T20:54:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lsd382](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/lsd382/32/815_2.png) [@lsd382](https://kopia.discourse.group/u/lsd382)\
**Post date:** [July 20, 2023, 8:54pm UTC](https://kopia.discourse.group/t/acls-for-superuser-do-not-work/2163/1 "2023-07-20T20:54:03Z")

</div>

Hello!

I want to add superuser adm@adm, that have to read and write everybody’ snapshots, policies,etc.  
There are acls I made:

ser:adm@adm access:FULL target:type=user,username=_@  
user:adm@adm access:FULL target:type=content  
user:adm@adm access:FULL target:type=policy,policyType=global  
user:adm@adm access:FULL target:type=policy,hostname=_,policyType=host  
user:adm@adm access:FULL target:type=policy,hostname=_,username=  
user:adm@adm access:FULL target:type=snapshot,hostname=_,username=

user:_@_ access:FULL target:type=user,username=OWN\_USER@OWN\_HOST  
user:_@_ access:APPEND target:type=content  
user:_@_ access:READ target:type=policy,policyType=global  
user:_@_ access:READ target:type=policy,hostname=OWN\_HOST,policyType=host  
user:_@_ access:READ target:type=policy,hostname=OWN\_HOST,username=OWN\_USER  
user:_@_ access:APPEND target:type=snapshot,hostname=OWN\_HOST,username=OWN\_USER

But when I’m connected to kopia repository server as adm@adm, I only see my snapshots, only my user in ‘kopia server user list’. And see no acl, no policies.

Please help me to understand where am I mistaken?

---

<div class="post-metadata">

**Author:** ![Pasquale\_Di\_Feo](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/pasquale_di_feo/32/791_2.png) [@Pasquale\_Di\_Feo](https://kopia.discourse.group/u/Pasquale_Di_Feo)\
**Post date:** [September 25, 2023, 1:12pm UTC](https://kopia.discourse.group/t/acls-for-superuser-do-not-work/2163/2 "2023-09-25T13:12:40Z")

</div>

I have a similar problem. Have you solved ?

---

<div class="post-metadata">

**Author:** ![lsd382](https://yyz2.discourse-cdn.com/free1/user_avatar/kopia.discourse.group/lsd382/32/815_2.png) [@lsd382](https://kopia.discourse.group/u/lsd382)\
**Post date:** [October 22, 2023, 11:36am UTC](https://kopia.discourse.group/t/acls-for-superuser-do-not-work/2163/3 "2023-10-22T11:36:38Z")

</div>

Hello, Pasquale, It works for me now:

kopia server acl delete --all --delete  
kopia server acl add --user adm@adm --access FULL --target type=user  
kopia server acl add --user adm@adm --access FULL --target type=acl  
kopia server acl add --user adm@adm --access FULL --target type=content  
kopia server acl add --user adm@adm --access FULL --target type=policy,policyType=global  
kopia server acl add --user adm@adm --access FULL --target type=policy,policyType=host,hostname=\*  
kopia server acl add --user adm@adm --access FULL --target type=policy,hostname=_,username=_  
kopia server acl add --user adm@adm --access FULL --target type=snapshot,username=_,hostname=_

kopia server acl add --user _@_ --access FULL --target type=user,username=OWN\_USER@OWN\_HOST  
kopia server acl add --user _@_ --access APPEND --target type=content  
kopia server acl add --user _@_ --access READ --target type=policy,policyType=global  
kopia server acl add --user _@_ --access READ --target type=policy,policyType=host,hostname=OWN\_HOST  
kopia server acl add --user _@_ --access READ --target type=policy,hostname=OWN\_HOST,username=OWN\_USER  
kopia server acl add --user _@_ --access APPEND --target type=snapshot,username=OWN\_USER,hostname=OWN\_HOST