Forum Discussion
Restrict root folder access in SharePoint Online
Hi layer9de - the easiest route may be to create your 2nd layer of folders in HR and Marketing and then granting edit rights to those folders while only allowing read rights on the top layer.
Kelly_Edinger Thanks - so in general I guess my assumption is correct I guess: In SharePoint we cannot separate permissions for folders and items withn a folder. That is, if a user as edit rights to a folder, the folder can always be edited / deleted as well. On a file server with NTFS permissions it's possible to configure ready only permissions to a folder but edit permissions to all contents within it. I guess this is not possible in SharePoint.
Based on your example: If I create a structure as follows:
Document Library <permission everyone view only
|
|- Folder HR < permission everyone view only
|- Folder Applications < permission Edit for HR
That means the folder HR cannot be deleted. However, everyone with edit permissions from HR could remove all folders from HR.
Thanks
Michael
- Oct 06, 2020
That is correct layer9de. You could also consider a custom permission level - 'contribute but not delete' and then apply that to the top level folders. https://docs.microsoft.com/en-us/sharepoint/how-to-create-and-edit-permission-levels