Purchase and manage Enterprise Drive

更新时间:
复制 MD 格式

Enterprise Drive is a user-friendly, flexible, and secure solution for internal file storage and collaboration for enterprise customers. This topic describes how to purchase a drive, modify its storage capacity limit, and configure permissions.

Prerequisites

If your enterprise accesses cloud computers over a private network and has configured domain name-based access permissions for the cloud computers, you must add the required domain names, ports, and download URLs to an allowlist. Otherwise, end users may not be able to use the drive or download the drive client.

  • Add the domain name ecd-share.cn-shanghai.aliyuncs.com and port TCP: 443 for the Enterprise Drive service to the allowlist.

  • Add the download URL for the drive client installation package to the allowlist: https://ecd-client.oss-accelerate.aliyuncs.com/cloudDriveService/windows/CloudDriveService.exe.

Purchase an Enterprise Drive

In WUYING Workspace, you can purchase an Enterprise Drive using a convenience account or an Active Directory (AD) account. The following steps use a convenience account as an example.

  1. Log on to the Elastic Desktop Service Enterprise console.

  2. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  3. In the top navigation bar, select a region.

  4. If you do not have an Enterprise Drive in the current region, click Purchase Enterprise Drive. You cannot purchase another drive if one already exists in the current region.

    Note

    If your Alibaba Cloud account has both convenience office networks and AD office networks, you can click Purchase More Drives in the upper-right corner of the page to purchase another Enterprise Drive.

  5. On the Purchase Enterprise Drive page, set the parameters according to the selected billing method, and then click Confirm Order.

    Subscription

    Configuration Item

    Description

    Example

    Drive Size

    The total storage space of the drive. After you purchase the drive, the sum of the storage capacity limits for all team drives and personal drives cannot exceed this size. Valid values:

    • 500 GiB: Suitable for enterprises with up to 5 users.

    • 2 TiB: Suitable for enterprises with up to 20 users.

    • 5 TiB: Suitable for enterprises with up to 50 users.

    • 10 TiB: Suitable for enterprises with up to 100 users.

    500 GiB

    Account Type

    Convenience accounts and AD accounts are supported. If you do not have an AD account, only the convenience account option is displayed and selected by default.

    Convenience account

    Select Office Network

    You need to select an office network only when you set Account Type to AD Account.

    None

    Enable Cross-region Access

    After you enable this feature, authorized users can access and use this drive from cloud computers in the China (Hangzhou), China (Shanghai), China (Beijing), and China (Shenzhen) regions.

    Note

    This feature is in invitational preview. To use it, submit a ticket to apply. After you enable this feature in one region, you cannot purchase drives in other regions. If you have multiple drives in different regions, you must shut down all but one drive to enable this feature.

    Keep the default value

    Purchase Method

    Valid values:

    • Subscription

    • Pay-as-you-go

    Subscription

    Auto-renewal

    Specifies whether to automatically renew the subscription drive before it expires.

    Keep the default value

    Pay-as-you-go

    Configuration Item

    Description

    Example

    Account Type

    Convenience accounts and AD accounts are supported. If you do not have an AD account, only the convenience account option is displayed and selected by default.

    Convenience account

    Select Office Network

    You need to select an office network only when you set Account Type to AD Account.

    None

    Peak Storage Space

    The maximum amount of data that can be stored in the drive. The value must be an integer from 1 to 51200 GiB.

    For a pay-as-you-go drive, setting a storage capacity limit helps control costs. When the total amount of data in the drive reaches this limit, end users cannot add more files.

    5

    Enable Cross-region Access

    After you enable this feature, authorized users can access and use this drive from cloud computers in the China (Hangzhou), China (Shanghai), China (Beijing), and China (Shenzhen) regions.

    Note

    This feature is in invitational preview. To use it, submit a ticket to apply. After you enable this feature in one region, you cannot purchase drives in other regions. If you have multiple drives in different regions, you must shut down all but one drive to enable this feature.

    Keep the default value

    Purchase Method

    Valid values:

    • Subscription

    • Pay-as-you-go

    Pay-as-you-go

    After the purchase is complete, the new drive is displayed on the Enterprise Drive page in the console.

Modify the storage capacity limit for a pay-as-you-go drive

For a pay-as-you-go drive, setting a storage capacity limit helps control costs. When the total amount of data in the drive reaches this limit, end users cannot add more files.

To modify the storage capacity limit, perform the following steps:

  1. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  2. In the top navigation bar, select a region.

  3. From the drop-down list at the top of the Enterprise Drive page, select the destination drive.

  4. On the Drive Details tab, in the Usage Information section, click Set Limit.

  5. In the dialog box that appears, adjust the limit and click OK.

    Note

    The value must be an integer from 1 to 51200 GiB. The new limit must be greater than the amount of storage space already used.

Configure permissions

Set the visibility of the Enterprise Drive on WUYING Terminals

By default, end users can access the drive from a cloud computer. They can also access the drive directly from the WUYING Terminal interface without logging on to a cloud computer. To disable direct access from the terminal, perform the following steps:

  1. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  2. In the top navigation bar, select a region.

  3. From the drop-down list at the top of the Enterprise Drive page, select the destination drive.

  4. On the Permissions & Services tab, click Permission Management.

  5. In the WUYING Client Drive Permissions section, turn off the Allow Usage switch, and click Confirm in the Confirm dialog box.

    After you turn off this switch, the drive is hidden from the WUYING Terminal interface the next time an end user logs on.

Set file transfer permissions between the drive and on-premises devices

When you access the drive from a cloud computer, file uploads and downloads are always allowed because both are in a secure environment. However, if the drive is visible on WUYING Terminals, end users can access it directly from the terminal interface. You can use policies to control file transfer permissions between the drive and on-premises devices.

  1. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  2. In the top navigation bar, select a region.

  3. From the drop-down list at the top of the Enterprise Drive page, select the destination drive.

  4. On the Permissions & Services tab, click Permission Management.

  5. Configure the scope of users for each policy as required.

    Note

    After you change the policy configuration, refresh the page to view the changes.

    Policy

    Upload files from on-premises device to drive

    Download files from drive to on-premises device

    Policy Scope

    Default Policy

    Allowed

    Disallowed

    To prevent end users from transferring sensitive data from cloud computers to on-premises devices through the drive, this default policy applies to all users of the drive. You do not need to set the scope for this policy. If a user is added to the scope of Policy 2 or Policy 3, the default policy does not apply to that user.

    Policy 2

    Disallowed

    Allowed

    Applies only to the users you select. To add users to this policy, click Add Authorized User and select users in the Select Authorized Users dialog box. If a selected user was previously added to the scope of Policy 3, the user is automatically removed from the scope of Policy 3.

    Policy 3

    Allowed

    Allowed

    Applies only to the users you select. To add users to this policy, click Add Authorized User and select users in the Select Authorized Users dialog box. If a selected user was previously added to the scope of Policy 2, the user is automatically removed from the scope of Policy 2.

Set sharing permissions

Enterprise Drive allows end users to share files with others in the following ways:

  • Share with users: You can share a folder with other drive users within your enterprise. The recipients can view the shared folder on the Shared with Me page in the drive client.

  • Share with a link: You can generate a public link for a file or folder. Anyone, including users outside your enterprise, can access the file or folder using the link.

    Important

    You can create and access up to 500 external shares each per day. If you create an external share without selecting the Only enterprise users can access it option, downloads of APK and IPA files from that share are blocked. To remove these limitations, an administrator must complete the custom domain name configuration. For more information, see Custom Domain Name Configuration. Starting February 24, 2025, at 10:00:00 (UTC+8), downloads of APK and IPA files will be blocked from all new external share links.

As an administrator, you can set the sharing permissions for the drive.

  1. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  2. In the top navigation bar, select a region.

  3. From the drop-down list at the top of the Enterprise Drive page, select the destination drive.

  4. On the Permissions & Services tab, click Security Policy.

  5. In the navigation pane on the left of the new page, choose Security Policy > Sharing/Authorization Settings, and turn on the Enable Sharing/Authorization Settings switch.

    After you turn on this switch, drive users can share folders in their personal drives and manage team space authorizations. For more information, see Enable sharing and sharing/authorization settings.

  6. In the navigation pane on the left, choose Security Policy > Sharing Settings Management, and turn on the Sharing Settings switch.

    After you turn on this switch, drive users can share files or folders in the drive with others. For more information, see Enable sharing and sharing/authorization settings.

Audit operation logs

The system records all operations performed on the drive by administrators and end users. To audit these operations, perform the following steps to view the operation logs.

  1. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  2. In the top navigation bar, select a region.

  3. From the drop-down list at the top of the Enterprise Drive page, select the destination drive.

  4. On the Permissions & Services tab, click Log Auditing.

  5. On the Log Auditing page, set the query conditions and view the operation records.

    Click Export Logs to export the queried logs.

Set a custom domain name for the drive

You can set a custom domain name for the drive to make it easier for users to access and recognize.

  1. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  2. In the top navigation bar, select a region.

  3. From the drop-down list at the top of the Enterprise Drive page, select the destination drive.

  4. On the Permissions & Services tab, click Enterprise Settings.

  5. In the navigation pane on the left, choose Enterprise Settings > Standard Customization, and click Configure Domain Name in the upper-right corner of the page.

    For more information, see Configure a custom domain name.

Shut down the drive service

Warning

After you shut down the drive service, all data in the drive is deleted and cannot be recovered. Back up your data before you proceed.

  1. In the navigation pane on the left, choose Network & Storage > Enterprise Drive.

  2. In the top navigation bar, select a region.

  3. From the drop-down list at the top of the Enterprise Drive page, select the destination drive.

  4. On the Permissions & Services tab, click Shut Down Enterprise Drive Service, and click OK in the confirmation dialog box.

    1. If the drive is a subscription drive, go to the Unsubscribe In-Use Resources tab on the Unsubscription Management page. Then, find Alibaba Cloud Drive for Enterprise and click Unsubscribe in the Actions column. For more information about unsubscription rules, see Unsubscription rules.

    2. If the drive is a pay-as-you-go drive, billing stops immediately after you confirm the shutdown.