Skip to main content
Documentation

Restricting a Group's Protocol Privileges

You can specify exactly which data transmission protocols a group's members are allowed to use to connect to Files.com. Controlling protocol access at the group level helps you meet security compliance regulations that apply to your business or industry.

Use the Protocol Access setting, within the group's Privileges settings, to allow or disallow the selected group's access to FTP (including FTPS and FTPES), SFTP, WebDAV, Web Portal, Desktop App, and the Files.com API.

Protocol SettingAPI AttributeDescription
FTPftp_permissionSpecifies whether members of the group are allowed to connect using the FTP, FTPS or FTPES protocol.
SFTPsftp_permissionSpecifies whether members of the group are allowed to connect using SFTP protocol.
WebDAVdav_permissionSpecifies whether members of the group are allowed to connect using WebDAV or WebDAVS protocol.
Web, Desktop App, and APIrestapi_permissionSpecifies whether members of the group are allowed to connect using the Files.com web portal, the Desktop App, or via the REST APIs using the HTTPS protocol.

User accounts with Administrator access privileges cannot be denied access to the Web Portal, Desktop App, and the Files.com API, but can be disallowed from accessing FTP (including FTPS and FTPES), SFTP, and WebDAV.

This setting works in conjunction with the IP Whitelist setting and the Access Control by Country setting.

Group Protocol Access vs User Protocol Access

By default, your site assigns protocol access through either users or groups. A user can connect with a protocol if it is enabled for their user account or if they belong to a group with the protocol enabled.

You can configure your site to manage all protocol access through groups. When you enable this setting, only users who are members of groups with a protocol enabled can use that protocol to connect. Protocol access for individual users is ignored, and only the group settings take effect.