Admins, GroupAdmins, and FileAdmins can grant/deny/override folder access policies to selected users or groups:

  1. Click FOLDERS from the side menu.
  2. Browse, select the folder you want to change access permissions for, and click Settings ().
    Tip: To modify "folder sharing" (Share) or subfolder permissions for the first time, you might need to "clear" (de-select) the Inherit Access from Parent checkbox. This setting allows folder structure or permissions at the Home folder level to be different (not inherit) from the parent folder.
    Figure 1. Inherit Access from Parent Checkbox (cleared shown)
    Tip: If you clear the Inherit Access from Parent Checkbox to apply custom permissions to the current Home folder, you can specify a Permission Behavior mode. Permission behavior mode will either Override (ignore permissions from the parent) or Add to (extend) the existing, inherited Home Folder permissions model.
    Figure 2. User's Home Folder Permission Behavior Selector (highlighted as shown)
  3. Select users or groups:
    • Admins can select users from the user list or use usernames or email addresses in the text entry box.
    • Users in Orgs with Ad Hoc enabled can use the contacts list.
    • If Secure Folder Sharing is enabled, Admins and Regular Users with Secure Folder Sharing privileges can input Email addresses of Temp users they want to share a folder with. (Admins can also search for current system users with an email address.)

  4. Adjust the user permissions, for example:
    • Add Permissions. Select users, groups, or email addresses for temp users you want to share with, select one or more access and sharing privilege checkboxes and then click Add Access.
    • Delete. Click the Remove icon ()
    • Modify. Click the Edit icon (). Select the checkboxes to grant folder access permissions. Clear the check boxes to deny a specific access permission.

      The user or group name appears in the User/Group column, with a check mark (X) in each column for the assigned permission.

Folder Access Permissions Overview

This section reviews folder access and sharing privileges.

Figure 3. Example: Applying Folder Access permissions to users and groups as Admin

Table of Access and Sharing Permission Settings

The folder access and folder sharing settings are listed in the following table.

Admins and file admins selecting this access type...

Enable this user behavior...

Read

User/group can read files from this folder.

Write

User/group can upload/overwrite files to this folder.

Delete

User/group can delete files from this folder.

List

User/group can list all files added to this folder (including those files added by users).

Notify

Email notifications sent to user/group when new files are uploaded to this folder. (Exception: When you upload a file to a folder you own, you will not be notified.)

Subs (Subfolders)

User/group can add, rename, and remove subfolders in the current folder.

User List

User can see other users that this folder is shared with.

Share

User can share this folder with users and groups.

Note: Delegating folder sharing authority to a user enables that user to override stricter policies (such as cases where folder permissions are locked to match the parent folder's access configuration).

Admin

User/group to manage the settings of this folder. If you wish to delegate the ability to designate who should be able to access this folder (for example, change folder permissions) to particular users, you must also promote those users to GroupAdmins.

"Extra Delete Permission" Rule:

Although DELETE permissions can be explicitly assigned, they are often used as derived permissions instead. The following rule is used to grant additional delete permissions:

When a user is granted ADMIN permission to a folder, that user will be granted DELETE permissions as well.

"Limited List Permission" Rule: Although LIST permissions can be explicitly assigned, they are also can behave as inherited permissions. The following rule is used to delegate additional LIST permissions on "write-only" folders:

If a user is granted WRITE permission to a folder, that user or group is also granted limited LIST permission to that folder.

In this case, the limited LIST permission granted on the folder allows users to view all files that user has uploaded, but no files that any other users have uploaded. This behavior may be turned off on a user-by-user basis by checking the shared flag on any user account; when this option is checked, the user does not have limited LIST permissions.

Implicit permissions cannot be changed or removed.

Explicit permissions can be edited, which means you can change the permissions assigned to that user or group. Explicit permissions can also be removed from a user or group.

Note: Instead of granting USERs permission, you can also grant GROUPs permission. Best practice: Create groups, add users to groups, and grant folder permissions to groups.

If multiple type of access to a folder are granted to a single user (for example, through user AND a group), file permissions are combined.

Inherit Access from Parent checkbox

Subfolders might have an Inherit Access from Parent option that causes access permissions for this folder to be chained/aligned with the permissions defined by the parent folder.

Note: When checked, this option will cause access to this folder to be completely controlled by the access settings of this folder's parent folder. (For example "MyTeam\InFolder" access might be controlled by "MyTeam" access rules.)

Overriding Inherited User Home or Parent Folder Permissions

To override parent folder permissions:

  1. Clear (de-select) the Inherit Access from Parent checkbox.
  2. Click Change Value.

    The User Access panel displays. (shown with Secure Folder Sharing enabled)

  3. Apply changes as defined in Editing/Modifying Folder Permissions

Editing/Modifying Folder Permissions

Admins, file admins, and regular users delegated with secure folder sharing can modify or extend folder permissions applied by the organization to an individual user's home folder. A regular user can override permissions (for select cases) when an admin decides it is necessary for a regular user to share his user home folder.

To override home folder permissions for a user:

  1. Click FOLDERS. In the Go to Folder box, select the user's home folder. The home folder page opens.
  2. Click Permissions and Settings. The foldername Settings page opens. Locate the Edit Folder Access section.
  3. In the row that lists the Home folder user, on the right, click the Override icon .

    The Edit Folder Access page opens for the user, showing the permissions currently held for the home folder.

  4. Select or deselect the checkboxes for the permissions to grant to the owner of the home folder.

    CAUTION: If you remove (deselect) all permissions, the user will not be able to see their home folder, or upload to/download from it.

  5. In the Permission Behavior section, make a selection:
    • Override inherited permissions. The explicit permissions you selected replace the default organization permissions.
    • Add to inherited permissions. The explicit permissions you selected supplement the default organization permissions.
  6. Click Change Permissions.