Abstract: Controlling access to a data storage device includes defining a plurality of groups that access the data storage device, defining a plurality of pools of devices of the data storage device, and, for at least one of the groups, determining access rights with respect to at least one of the pools. The pools of devices may include communication ports and/or memory segments of the storage element. The access rights may indicate whether system calls are allowed on the communication ports. In some embodiments, restricting access to a data storage device includes coupling each of a plurality of host requestor systems to the storage element by one of a plurality of ports provided for the storage element and selectively determining, for each of the ports, whether system calls are allowed, where, for the ports in which system calls are not allowed, a system call by the host systems coupled thereto causes the storage element to indicate that the system call was not performed.