Forum Discussion

layer9de's avatar
layer9de
Copper Contributor
Oct 05, 2020

Restrict root folder access in SharePoint Online

Dear all,

 

we're planning on moving some files and folders from a file server to a document library in SharePoint online. Let's image we create a folder structure like the following:

 

Document Library

| Folder 1 HR

| Folder 2 Marketing

 

Is there a way to prohbit users from deleting the folders in the root but allowing them to add and change content within those folders? In NTFS this is possible but from what I can see in SharePoint this cannot be achived - if I assign Edit permissions to a folder the folder and all its contents can be removed, if I assign only View to the folder nothing can be added to the folder.

 

I think this is not critical but if there is an easy way to accomplish I'd appreciate if someone gives me a hint.


Thanks
Michael

3 Replies

  • Kelly_Edinger's avatar
    Kelly_Edinger
    Bronze Contributor

    Hi layer9de - the easiest route may be to create your 2nd layer of folders in HR and Marketing and then granting edit rights to those folders while only allowing read rights on the top layer.

    • layer9de's avatar
      layer9de
      Copper Contributor

      Kelly_Edinger Thanks - so in general I guess my assumption is correct I guess: In SharePoint we cannot separate permissions for folders and items withn a folder. That is, if a user as edit rights to a folder, the folder can always be edited / deleted as well. On a file server with NTFS permissions it's possible to configure ready only permissions to a folder but edit permissions to all contents within it. I guess this is not possible in SharePoint.

       

      Based on your example: If I create a structure as follows:

       

      Document Library <permission everyone view only

      |

      |- Folder HR < permission everyone view only

              |- Folder Applications < permission Edit for HR

       

      That means the folder HR cannot be deleted. However, everyone with edit permissions from HR could remove all folders from HR.

       

      Thanks
      Michael

Resources