# Manage Object Users
**Object users** are users created to perform operations on cegedim.cloud Object Storage service using the **S3 API**.
An **Object user** is represented by:
* an **access\_key**
* a **secret\_key**
{% hint style="info" %}
When you create an **Object Store**, an **Object user** is automatically created with the label "***Initial S3 user***"
{% endhint %}
## Create an Object user
In the detailed page on your **Object Store**, click on the "**Add User**" button
Enter a "**Label**" to easily identify this new **Object user**, then click on the **Submit** button:
Once **Object User** created, a pop-up appears, displaying the **`access_key`** and the **`secret_key`**. You can close this pop-up once you have save your credentials.
The newly created **Object user** is displayed in the **User** tab:
## Manage an Object user
### Change the label
You can change the label of an **Object User**, using the  button
### Lock or Unlock
You can lock or unlock an **Object Use**r using the  button:
An **Object User** locked have a closed green pad lock  on the left of the label and can't perform any operation using the **S3 API**.
### Renew a secret key
You can at any time change the secret key of an **Object User** by clicking on the  button.
{% hint style="danger" %}
If you change the secret of an **Object User**, all applications or clients using it will get a **`401 Unauthorized Error`**.
{% endhint %}
{% hint style="warning" %}
The change of a secret key can take few minutes to propagate over all cegedim.cloud Object Storage Service.
{% endhint %}
You have the possibility the specify a "**grace period**", in seconds, during which, both old and new secret keys are valid and accepted by cegedim.cloud Object Storage Service.
At the end of the grace period, the old secret key is invalidate.
Once the action submitted, a popup appears displaying **the new secret key**:
You can close this pop-up once you have save your credentials.
## Delete an Object user
You can delete an **Object User** by clicking on the  button.
{% hint style="danger" %}
This action cannot be undone.
{% endhint %}
.png?alt=media)
.png?alt=media)
.png?alt=media)
.png?alt=media)
.png?alt=media)
.png?alt=media)
.png?alt=media)