securityDescriptorCopyFlags

Specifies which components of the SMB security descriptor are copied from source to destination objects.

This value is only used for transfers between SMB and Amazon FSx for Windows File Server locations or between two FSx for Windows File Server locations. For more information, see Understanding how DataSync handles file and object metadata.

• OWNER_DACL (default) - For each copied object, DataSync copies the following metadata:

• The object owner.

• NTFS discretionary access control lists (DACLs), which determine whether to grant access to an object.DataSync won't copy NTFS system access control lists (SACLs) with this option.

• OWNER_DACL_SACL - For each copied object, DataSync copies the following metadata:

• The object owner.

• NTFS discretionary access control lists (DACLs), which determine whether to grant access to an object.

• SACLs, which are used by administrators to log attempts to access a secured object.Copying SACLs requires granting additional permissions to the Windows user that DataSync uses to access your SMB location. For information about choosing a user with the right permissions, see required permissions for SMB, FSx for Windows File Server, or FSx for ONTAP (depending on the type of location in your transfer).

• NONE - None of the SMB security descriptor components are copied. Destination objects are owned by the user that was provided for accessing the destination location. DACLs and SACLs are set based on the destination server’s configuration.