Child Sites let an organization maintain separate site configuration while retaining Parent Site administration. Someone responsible for a subsidiary or regional Site can receive full administration of that Child Site without receiving authority over the Parent Site or sibling Child Sites.

Selected-site Authority

A Child Site Administrator manages that Child Site's files, users, settings, and integrations, subject to settings locked by a Child Site Management Policy. The grant does not provide folder access or administration on the Parent Site, or access to sibling Child Sites. The Parent Site separately controls directory sharing.

Every Parent Site Administrator retains full authority over every Child Site. Child Site permissions, separate SSO configuration, and management policies cannot exclude them. Choose a Child Site for separate configuration under that central authority, rather than as a way to remove Parent Site Administrators' access.

The content restrictions of finalized Snapshots and Archive Only Mode continue to apply to administrators on the Child Site.

Where the Administrator's User Is Managed

A parent-site user can receive Child Site Administrator access directly or through a Group, without a second user being created on the Child Site. Only a Parent Site Administrator can grant or remove this administrative access. Folder administration by itself does not include that power.

The user continues to be managed on the Parent Site. Parent Site Administrators, Workspace Administrators, and Group Admins retain their account-management authority within their respective scopes and enabled capabilities. A Child Site Administrator grant does not exclude an otherwise eligible parent-site user from Group Admin management.

For example, a parent-site user can administer a regional Child Site while their Primary Group remains Regional Operations. A Group Admin for that Primary Group can manage the user with the enabled capabilities, including email editing or password resets when allowed. Disabling or deleting the parent-site user also ends their Child Site access. Choose who manages that identity with its Child Site authority in mind.

Alternatively, a user created directly in the Child Site is managed there. Parent Site Workspace Administrator or Group Admin access does not by itself provide authority over that user. Parent Site Administrators retain their authority over the Child Site and its users.

Connection and Identity Choices

Parent-site users sign in on the Parent Site and switch into the Child Site for administrative work. Direct FTP or SFTP connections to the Child Site require a user on that Child Site; protocol authentication does not cross Site boundaries. API keys are also linked to the Site where they are issued. A separate Child Site user can use that Site's own SSO configuration.

Parent and Child Site Administrators explains assignment and these identity choices. Password Recovery & Credential Changes explains why authority over an administrator's email address and credentials matters alongside the Site they administer.