When troubleshooting issues with the Iconik Storage Gateway (ISG), it’s important to confirm that the user account running the ISG service has full read and write access to the storage mount point.
This guide explains how to identify the ISG service user, check its access rights, and fix permissions if needed on Mac/Linux and Windows systems.
Mac and Linux
Step 1: Find the User Running the ISG Service
Run:
ps aux | grep iconik_storage_gateway
Example output:
iconik 2134 0.0 0.5 246812 11240 ? Ssl Aug16 0:03 /usr/bin/python3 /usr/local/bin/iconik_storage_gateway
In this example:
-
The first column (
iconik) is the user account running the ISG service. -
This is the account whose permissions you need to check on your mount point.
Step 2: Check Directory Permissions
Run:
ls -lah /mnt/media
Example output:
drwxrwxr-x 5 iconik iconik 160 Aug 17 12:01 media
-rw-rw-r-- 1 iconik iconik 512 Aug 17 11:55 sample.mov
How to interpret:
-
Owner:
iconik -
Group:
iconik -
Permissions:
drwxrwxr-x→ owner and group haverw, others have read-only.
If the ISG user from Step 1 matches the owner and has rw access, permissions are correct.
If not, fix them as shown below.
Step 3: Fix Permissions (if needed)
-
Give ownership of the directory to the ISG user:
sudo chown -R iconik:iconik /mnt/media -
Give full read/write/execute permissions to the user:
sudo chmod -R u+rwX /mnt/media
Important: The -R flag applies changes recursively. This ensures that not only the root directory but also all nested subfolders and files are updated. Without recursive changes, subdirectories may still block ISG access.
Windows
Step 1: Find the User Running the ISG Service
In Powershell, run:
Get-WmiObject Win32_Process -Filter "Name = 'iconik_storage_gateway_service.exe'" |
Select-Object Name, @{Name="UserName";Expression={(Get-WmiObject Win32_ComputerSystem).UserName}}
Example output:
Name UserName
---- --------
iconik_storage_gateway_service.exe ICONIK-PC\Iconik
In this example:
-
The ISG service is running as the user
Iconik.
Step 2: Check Directory Permissions
Run:
icacls "D:\Media" /T
Example output:
D:\Media ICONIK-PC\Iconik:(F)
BUILTIN\Administrators:(F)
NT AUTHORITY\SYSTEM:(F)
How to interpret:
-
ICONIK-PC\Iconik:(F)→ the user running ISG has Full control (F).
If the ISG user has (F) on the mount point, access is correct.
If not, fix it as shown below.
Step 3: Fix Permissions (if needed)
-
Grant the ISG user full control of the directory:
icacls "D:\Media" /grant "ICONIK-PC\Iconik:(F)" /T -
Verify the change:
icacls "D:\Media"
You should see an entry like:
ICONIK-PC\Iconik:(F)
Important: The /T flag applies changes to all nested subfolders and files. If you omit /T, only the top-level folder will have updated permissions, which can still block ISG access deeper in the file structure.
Step 4: Working with Networked Drives
If you are using networked drives (SMB, NAS, etc.), be aware that Windows Services cannot access normal mapped drives. To ensure ISG can access them, configure the service so it runs as a defined user:
-
Open CMD Prompt as Administrator.
-
Create a symbolic link to the network resource:
mklink /D C:\link_to_the_resource "\\Server\resource_folder"Replace the paths as needed for your environment.
-
Test the link by opening it in Windows Explorer to confirm it works.
-
Install the Iconik Storage Gateway.
-
After installation, stop the Iconik Storage Gateway.
-
Open the Windows Services panel (
services.msc). -
Locate Iconik Storage Gateway Service, right-click, and select Properties.
-
Go to the Log On tab.
-
Select Log On as: This Account.
-
Choose an account that has permissions to read and write to the storage.
-
Click OK.
-
Restart the Iconik Storage Gateway from the tray application.