Workspaces and Access
Folder permission levels
Understand the permission levels that control viewing, editing, sharing, and folder management.
Folder permissions control what you can see and change in a Library folder. The same person can have different access in different folders.
Compare permission levels
| Permission | What it allows |
|---|---|
| Owner | View and change content, use Share Folder, add or remove members, and change member roles. |
| Read/write | View, create, edit, upload, move, and remove content when the folder is writable. It does not allow member management. |
| Read only | View and open available content. Creating, editing, uploading, moving, deleting, and sharing are unavailable. |
A workspace authoring limit or another read-only state can still prevent changes for someone with Owner or Read/write access. CareMap shows only the actions that are currently available.
Check or change folder access
- Open Library and go to the folder.
- Open More Library actions > Folder Details to check your access level and whether it is direct or inherited.
- If you are the folder Owner, open More Library actions > Share Folder.
- Choose Add member, select an available contact, choose a role, and then choose Add member again.
- To update a direct member, choose a different role beside their name. Choose Remove to remove their direct access.
Only active contacts who do not already have direct access are available in the add-member list. CareMap asks for confirmation before a role downgrade or access removal, and it prevents removal of a folder's last direct Owner.
Direct and inherited access
- Direct access was assigned on the current folder and applies to that folder and its descendants.
- Inherited access comes from a parent folder. Change or remove it where the direct role was assigned, not from the child folder.
- If more than one role applies, CareMap uses the strongest one. A lower direct role does not reduce stronger inherited access.
Removing a direct role may leave the folder visible when access is still inherited. Refresh CareMap after a recent change, check Folder Details, and ask the Owner of the parent folder to review the original grant if the access level is not what you expected.
Folder roles do not automatically grant access to People, Reports, organization controls, or other separately protected areas.