Assigning Permissions

Site Administrators create folder permissions, to grant access to groups, partners, or individual users.

You must specify the folder, the group or partner or user, the permission level to be applied, and whether the permission should only be applied to this folder or also recursively to its subfolders.

Folder permissions must be created one folder at a time. You cannot create a single permission that applies to multiple independent folders. This means that, for example, you cannot create a single permission that grants access to the folder "Sales/Documents" and "Sales/Assets/Brochures" because they are not in the same folder tree.

A single permission can apply recursively to all subfolders within the targeted folder, or you can instead restrict the permission to just that folder and not any of its subfolders. This allows you to use Files.com permissions with legacy folder structures without re-organizing the folder hierarchy.

Additional access permissions can be applied to subfolders regardless of whether the subfolder is inheriting any permissions from a parent folder. Permission fences selectively stop the recursion of a parent folder permission.

Managing Permissions

Site Administrators manage folder permissions for a group, a user, or a partner. Folder admins can add and revoke permissions relating to their folders for a group or a user.

Existing folder permissions can be revoked to remove that permission from the user, group, or partner. Permissions can only be applied or revoked, not modified.

Permissions for Child Sites

Because a child site is a fully-featured site, Site Administrators manage folder permissions within the child site in the same way as for a parent site. Users, groups, and partners within the child site can be granted access to folders in the child site by a Site Admnistrator.

Site Administrators for a parent site can also grant folder permissions for folders in a child site to users or groups in the parent site. This provides a level of centralized permission management.

By centralizing the permission management within the parent site, you maintain visibility across all of your sites from one place, making it easier to enforce least-privilege access.

Restricting Access Permissions to the Root Folder

To prevent assignment of permissions to users for the root folder level of your site, enable the Restrict root folder permissions option within your site's Data Restrictions settings. When this setting is enabled, it prevents assigning non-administrators any access permissions to the root folder of your site.