add storage auth (logical)