Start/notes.ini Parameters/Allow_Access

Allow_Access

🛠️
Parameter: Allow_Access
Short description: Local access list: explicitly allowed users/groups for this server (override of the Server ACL).

Profile

Parameter
Allow_Access
Category
Security / TLS
Component
Server
Available since
R4
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5
GUI equivalent
Server document (Security → Server Access)
Possible values
Comma-separated hierarchical user/group names, e.g. Admins/Domain, John Doe/Domain

Description

Allow_Access is a local access filter that can be set directly in notes.ini. If entries are present here, only the listed users/groups are allowed to reach the server at all – regardless of the Server document ACL. Useful for emergency lockdowns, isolated test servers, or short-term maintenance windows.
In normal operation, access control is maintained via the Server document (Access server, Not access server fields); Allow_Access is the quick, immediately effective emergency brake.

Example configuration

Allow_Access=Admins/Domain,John Doe/Domain

Notes & pitfalls

  • If the entry is set, all users not listed are rejected – including server mates!
  • Check server-to-server connections in advance (replication, mail routing, cluster).
  • Use hierarchical names, not short names.
  • Works together with Deny_Access (deny list).
  • The change takes effect after a set config reload or after a server restart.