Workspaces and Access
Folder permission levels
Understand the permission levels that control viewing, editing, sharing, and folder management.
Folder roles apply to a Library folder and its descendants. Your effective role can include permissions inherited from a parent.
| Role | Supported actions, subject to workspace and item restrictions |
|---|---|
| Owner | View and edit content; manage direct members with Share Folder when the folder is writable. |
| Read/write | View, create, edit, upload, move, and remove supported content. The role itself does not allow member management. |
| Read only | Browse and use available content; no content editing or member management from this role. |
A License and sufficient storage may also be required for authoring. Folder sharing does not grant access to unrelated People, Reports, or organization management areas. Guardians have separate authority, which should not be confused with a folder role.
Inspect and grant access
- Open the folder in Library.
- Open More Library actions > Folder Details. Check Access and whether the grant is direct, inherited, or a root grant.
- With writable Owner access, open More Library actions > Share Folder.
- Select Add member, find an active contact by name or email, and select that person. Choose Read only, Read/write, or Owner; the default is Read only.
- Select Add member to apply the direct grant.
Contacts who already have direct access are excluded from the picker. Someone with inherited-only access can receive an additional direct grant. If no eligible contacts are available, establish the intended contact relationship first.
Change or remove a direct grant
In Share Folder, direct rows have a role selector and Remove. Role increases apply directly; decreases ask for Confirm change. Removal asks for Remove access. Check the resulting effective-role badge after the change.
CareMap rejects downgrading your own direct Owner role through the role selector. Removing or leaving the last direct Owner grant requires another direct Owner first. Organization-root access is maintained from membership; use organization membership controls for organization-wide role changes.
Understand inheritance
Inherited rows cannot be edited or removed in the child folder. Change the original direct grant at its parent. When multiple roles apply, the strongest wins: Owner, then Read/write, then Read only. A lower direct role is not a restriction on stronger inherited access.
Removing a direct grant can leave inherited access. A child with an independent direct grant can also remain accessible after a parent grant is removed. Changing membership, contact permissions, or Guardian status is a different operation from removing one folder grant.
If the displayed inheritance appears inconsistent, use Check and repair folder permissions. To stop using your own direct shared grant, see Leave a folder.