Start/notes.ini Parameters/Create_Replica_Access

Create_Replica_Access

🛠️
Parameter: Create_Replica_Access
Short description: List of identities allowed to create replicas on this server – corresponds to Create new replicas in the Server document.

Profile

Parameter
Create_Replica_Access
Category
Security / TLS
Component
Server
Available since
9.0.1
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
Server document (Security → Server Access → Create new replicas)
Possible values
Comma-separated Notes names / groups; empty = no one (except full administrator)

Description

Replicas are exact, replicating copies of a database. Anyone who can create replicas can duplicate entire applications to other servers (or locally). Create_Replica_Access restricts this to a specific group of people. If the list is empty, only server administrators with Full access rights can create replicas.
An important protection layer against "data leakage via replication" – especially on servers with sensitive applications.

Example configuration

Create_Replica_Access=ReplicationAdmins/acme,CN=Manfred Dillmann/O=acme

Notes & pitfalls

  • Use hierarchical Notes names, not short names.
  • Keep in sync with the Server document.
  • Acts in addition to the database ACL – not instead of it.
  • Takes effect after a server restart.
  • Complementary to Create_Master_Templates_Access, Create_File_Access.