Is it possible to disable folder security inheritance for a specific group?

Hi,

We have a number of confidential project folders. I would like to apply specific folder permissions to a group applied to a sub folder and disable the inheritance for this user, if this possible?

So for example like this -

Parent folder

   Administrator - All permissions

   Conf - Read/Write

   Accounts - Read only

      Sub folder A

          Administrator - All permissions

          Conf - Read/Write

          Accounts - Read only

              Sub folder B

                  Administrator - All permissions

                  Conf - Read/Write

                  Account - Deny

So Ideally disable the inheritance on Sub folder A, Accounts Group. So any changes made to Parent folder permissions do no overwrite the individual permissions set on Sub folder A. I appreciate I can manually go through and do this, however I wish to apply it to a template and create projects from it and there will always be tweaks/additions required to new project so permissions are lost.

We have the same issue when providing contractors access to a certain folder buried somewhere, the permissions above are changed for some reason and without realizing the individually applied permission on sub folder below i.e. the contractors permission are changed.

Thanks in advance for any suggestions

Parents
  • You can't break inheritance on a folder for a single group, you break for all groups on the folder, and sub-folders to that folder (so you need to also break inheritance on Sub Folder B or it will inherit from Sub Folder A). When you break inheritance on Sub Folder A, if you make a change to Conf permissions on parent folder that also will not copy to Sub Folder A (or B).

    Assuming you're OK with that, how are you copying your template? As long as I have "Copy Access Control" turned on it keeps the broken inheritance from our templates.

    For drag & drop of a Work Area you should get a pop-up with an Advanced tab that has Copy Access Control.

    If you're using the "New Work Area" flow then the 2nd step of the process also has an Advanced tab with that option.

    I did run into an issue with PowerShell and Copy-PWFolder where I had to re-break inheritance then apply the security I wanted, but since it was scripted didn't really matter since I wasn't redoing it by hand. If you're using powershell I can post how i did this.

     

Reply
  • You can't break inheritance on a folder for a single group, you break for all groups on the folder, and sub-folders to that folder (so you need to also break inheritance on Sub Folder B or it will inherit from Sub Folder A). When you break inheritance on Sub Folder A, if you make a change to Conf permissions on parent folder that also will not copy to Sub Folder A (or B).

    Assuming you're OK with that, how are you copying your template? As long as I have "Copy Access Control" turned on it keeps the broken inheritance from our templates.

    For drag & drop of a Work Area you should get a pop-up with an Advanced tab that has Copy Access Control.

    If you're using the "New Work Area" flow then the 2nd step of the process also has an Advanced tab with that option.

    I did run into an issue with PowerShell and Copy-PWFolder where I had to re-break inheritance then apply the security I wanted, but since it was scripted didn't really matter since I wasn't redoing it by hand. If you're using powershell I can post how i did this.

     

Children
No Data