Assigning Permissions

Site Administrators create folder permissions, to grant access to groups, partners, or individual users.

You must specify the folder, the group or partner or user, the permission level to apply, and whether the permission applies only to this folder or also recursively to its subfolders.

Folder permissions must be created one folder at a time. You cannot create a single permission that applies to multiple independent folders. This means that, for example, you cannot create a single permission that grants access to the folder "Sales/Documents" and "Sales/Assets/Brochures" because they are not in the same folder tree.

A single permission can apply recursively to all subfolders within the targeted folder, or you can instead restrict the permission to just that folder and not any of its subfolders. This allows you to use Files.com permissions with legacy folder structures without re-organizing the folder hierarchy.

Additional access permissions can be applied to subfolders regardless of whether the subfolder is inheriting any permissions from a parent folder.

User Level Permissions

Direct user permissions add access that is not covered by any Group the user belongs to. They combine with the permissions inherited from Groups.

Edit a user to assign or manage the folder permissions for that user.

The user's permission table lists only the folder permissions granted directly to that user. Permissions inherited from groups are not displayed there.

Managing Permissions

Site Administrators manage folder permissions for a group, a user, or a partner. Folder admins can add and revoke permissions relating to their folders for a group or a user.

Existing folder permissions can be revoked to remove that permission from the user, group, or partner. Permissions can only be applied or revoked, not modified.

Permissions for Child Sites

Because a child site is a fully-featured site, Site Administrators manage folder permissions within the child site in the same way as for a parent site. A Site Administrator can grant users, groups, and partners within the child site access to folders in the child site.

Parent Site Administrators can grant Child Site folder permissions to Parent Site Default Workspace users and groups. The Parent Site's permissions audit export provides visibility across its Child Sites even when folder administration is delegated locally.

When the Parent Site shares its directory, Child Site Administrators, Parent Site users with delegated Child Site Administrator access, and Folder Admins for the folder can also grant and revoke ordinary folder permissions for those Parent Site users and groups. They can select identities that do not already have Child Site access, and their authority extends only to the folders they administer. The accounts and group memberships remain managed on the Parent Site. Delegated administrative access to a Child Site is separate from ordinary folder permissions; only a Parent Site Administrator can grant or remove it.

If directory sharing is off, Child Site administrators without their own Parent Site administrative authority cannot make new assignments to other Parent Site identities. A rejection stating that the Parent Site does not share its directory is a Parent Site configuration restriction; a Parent Site Administrator controls that setting. Existing folder grants remain in place and can still be removed by administrators of the folder. Parent Site administrative authority remains available independently of directory sharing.

Restricting Access Permissions to the Root Folder

To prevent assignment of permissions to users for the root folder level of your site, enable the Restrict root folder permissions option within your site's Data Restrictions settings. When this setting is enabled, it prevents assigning non-administrators any access permissions to the root folder of your site.

This restriction applies only to the site's root folder, which is the root of the Default Workspace. It does not prevent assigning permissions on the root folder of any other Workspace or on any other folder.