Folder Access Settings

Admins, GroupAdmins, and FileAdmins can grant/deny/override folder access to selected users or groups:

Click FOLDERS from the side menu.
Browse, select the folder you want to change access permissions for, and click Settings ().
To customize share permissions for the first time, you might need to clear (de-select) the Inherit Access from Parent checkbox to allow permissions at the current level to be different from its parent folder.
Select users or groups:
- Admins can select users from the user list or use usernames or email addresses in the text entry box.
- Users in Orgs with Ad Hoc enabled can use the contacts list.
- If Secure Folder Sharing is enabled, Admins and Regular Users with Secure Folder Sharing privileges can input Email addresses of Temp users they want to share a folder with. (Admins can also search for current system users with an email address.)
Adjust the user permissions, for example:
- Add Permissions. Select users, groups, or email addresses of temp users you want to share with, select one or more access and sharing privilege checkboxes and then click Add Access.
- Delete. Click the Remove icon ()
- Modify. Click the Edit icon (). Select the checkboxes to grant folder access permissions. Clear the check boxes to deny a specific access permission.
The user or group name appears in the User/Group column, with a check mark (X) in each column for the assigned permission.

Folder Access (Sharing) Permissions:

Applying Folder Access permissions as Admin.

Delegating Folder Access and Sharing Privileges

Admins and file admins selecting this access type...	Enable this user behavior...
Read	User/group can read files from this folder.
Write	User/group can upload/overwrite files to this folder.
Delete	User/group can delete files from this folder.
List	User/group can list all files added to this folder (including those files added by users).
Notify	Email notifications sent to user/group when new files are uploaded to this folder. (Exception: When you upload a file to a folder you own, you will not be notified.)
Subs	User/group can add, rename, and remove subfolders in this folder.
User List	User can see other users that this folder is shared with.
Share	User can share this folder with users and groups. Note: Delegating folder sharing authority to a user enables that user to override stricter policies (such as cases where folder permissions are locked to match the parent folder's access configuration).
Admin	User/group to manage the settings of this folder. If you wish to delegate the ability to designate who should be able to access this folder (for example, change folder permissions) to particular users, you must also promote those users to GroupAdmins.

"Extra Delete Permission" Rule:

Although DELETE permissions can be explicitly assigned, they are often used as derived permissions instead. The following rule is used to grant additional delete permissions:

When a user is granted ADMIN permission to a folder, that user will be granted DELETE permissions as well.

"Limited List Permission" Rule: Although LIST permissions can be explicitly assigned, they are also used as derived permissions instead. The following rule is used to award additional LIST permissions on "write-only" folders:

If a user is granted WRITE permission to a folder, that user or group will be granted limited LIST permission to that folder as well. In this case, the limited LIST permission granted on the folder allows users to view all files that user has uploaded, but no files that any other users have uploaded. This behavior may be turned off on a user-by-user basis by checking the shared flag on any user account; when this option is checked, the user does not have limited LIST permissions.

Implicit permissions cannot be changed or removed.

Explicit permissions can be edited, which means you can change the permissions assigned to that user or group. Explicit permissions can also be removed from a user or group.

Note: Instead of granting USERs permission, you can also grant GROUPs permission.
Best practice: Create groups, add users to groups, and grant folder permissions to groups.

If multiple type of access to a folder are granted to a single user (for example, through user AND a group), file permissions are combined.

Inherit Access from Parent checkbox

Subfolders might have an Inherit Access from Parent option that causes access permissions for this folder to be chained/aligned with the permissions defined by the parent folder.

Note: When checked, this option will cause access to this folder to be completely controlled by the access settings of this folder's parent folder. (For example "MyTeam\InFolder" access might be controlled by "MyTeam" access rules.)

Overriding Inherited User Home or Parent Folder Permissions

To override parent folder permissions:

Clear (de-select) the Inherit Access from Parent checkbox.
Click Change Value.
The User Access panel displays. (shown with Secure Folder Sharing enabled)
Apply changes as defined in Editing/Modifying Folder Permissions

Editing/Modifying Folder Permissions

Admins, file admins, and regular users delegated with secure folder sharing can modify or extend folder permissions applied by the organization to an individual user's home folder. A regular user can override permissions (for select cases) when an admin decides it is necessary for a regular user to share his user home folder.

To override home folder permissions for a user:
1. Click FOLDERS. In the Go to Folder box, select the user's home folder. The home folder page opens.
2. Click Permissions and Settings. The foldername Settings page opens. Locate the Edit Folder Access section.
3. In the row that lists the Home folder user, on the right, click the Override icon .
  The Edit Folder Access page opens for the user, showing the permissions currently held for the home folder.
4. Select or deselect the checkboxes for the permissions to grant to the owner of the home folder.
  CAUTION: If you remove (deselect) all permissions, the user will not be able to see their home folder, or upload to/download from it.
5. In the Permission Behavior section, make a selection:
  - Override inherited permissions. The explicit permissions you selected replace the default organization permissions.
  - Add to inherited permissions. The explicit permissions you selected supplement the default organization permissions.
6. Click Change Permissions.