Most administrators prefer to start by setting folder permissions on the group level. When a user is added to a group, either during new user creation or by editing the user profile, they will automatically inherit all folder permissions assigned to the group.

Examples of access control configurations might involve granting all company users the ability to list and preview files in the Company Documents folder, providing non-administrator members of the IT team full access to all IT department folders along with view history permissions for all other files on the server, and restricting access to the HR folder exclusively to members of the Human Resources department, who can then have Read/Write privileges for the files within.

Edit a group to assign or manage the folder permissions for that group.

Permissions at the group level should be broad and relevant to that sub-section of users.

Requiring That Groups be Used for All Permission Assignment

To ensure consistency in how your site is applying permissions, a site administrator can require all Permissions to be assigned only to Groups, and not to individual users.

With this feature enabled, you can ensure that a group permission framework is followed, and no one - whether accidentally or purposely - grants users individual permissions.

You can enable this Manage all folder permissions via groups option within your site's Group settings.

Enabling this setting will not remove permissions previously granted to individual users.