How to Grant Permissions for selected Shares?

The Grant Permissions feature allows you to grant permissions to the Shares. You can use many options like Add the new permissions to the account's existing permissions, Replace the account's existing permissions with the new permissions, etc. You may select options to Allow, Block inheritance from the parent object and also Replace all child objects existing permissions with the inheritable permissions from this object while granting permissions for accounts.


Click on button.

The Grant Permissions window will be displayed as shown below:
Step 1: Configure shared folder-list:

 To configure shared folders, click Click here to add shared folders link.

Click Next to proceed to the next step.
Step 2: Configure User/Group Account(s):
  1. To configure user / group accounts , click Click here to add user or group accounts link.
  2. The selected accounts will be added to the wizard as shown below:

Click Next to proceed to the Next step.
Step 3: Select Access Control type and permissions:
Select ACE type and permissions to grant for the selected accounts on the selected shared folder(s) /files(s)

Click Next to proceed to the next step.
Step 4: Apply the required rules to be used while assigning permissions:
Select which rules to apply while assigning permissions.

 

Add the new permissions to the account's existing permissions option will add the selected permissions to the existing permissions list and also it will not affect the existing permissions.

You may also use the below options to grant permissions and also apply inheritance by Inheritance rule  

  • Remove all existing accounts and replace with the selected accounts and permissions.
  • Replace the account's existing permissions with the new permissions.
  • Replace all child objects existing permissions with the inheritable permissions from this object.

Inheritance Rule:

  • Allow inherited permissions from this object's parent.
  • Copy inherited permissions.
  • Remove inherited permissions.

Remove all existing accounts and replace with the selected accounts and permissions

This option will remove all existing accounts that have explicitly assigned permissions for the selected shared folder(s)/file(s) and replace them with the selected accounts and permissions.Note that this will not remove inherited permissions from parent folder.

Caution: All existing account permissions will be cleaned up completely and the newly selected permissions will be applied.

Example: If the share has 7 accounts then this option will remove all the 7 accounts and replace with the new selected accounts and permissions.

Replace the account's existing permissions with the new permissions

If a selected account already exists in the current list of permissions of the selected shared folder(s)/file(s), this option will replace all explicitly assigned account permissions with the newly selected permissions for that account.

Example: If the share already has some accounts with permissions like Allow Read and Write and if the same existing accounts selected with permissions Deny Modify to grant permissions then this option will replace the existing accounts previous permissions(Allow Read and Write) with new permission(Deny Modify). otherwise if the selected account not exist in the share permissions list then it will add into the permissions list.

Replace all child objects existing permissions with the inheritable permissions from this object

This option will remove explicitly defined permissions on all descendants of the selected shared folder(s)/file(s) and replace them with inheritable permissions from the selected shared folder(s)/file(s).

Example : If the share has some subfolders with the explicitly assigned permissions and some subfolders with blocked inheritance then this option will remove all explicitly assigned permissions of subfolders and allow inherited permissions from the parent object.

Allow inherited permissions from this object's Parent

This option will allow the selected shared folder(s)/file(s) to inherit permissions from its parent object.

Example:If the share do not have any inherited permissions and the inheritance from the parent object blocked then this option will allow inherited permissions from the parent object.

Copy inherited permissions

This option will copy the permission entries that were previously inherited from the parent to this selected shared folder(s)/file(s).

Example: If the share already allowed to inherit permissions from parent object then this option will remove the inheritance and add the inherited permissions as explicit permissions in the permissions list.

Remove inherited permissions

This option will remove the permission entries that were previously inherited from the parent and keep only those permissions explicitly defined/granted here.

Caution: Removing permission inheritance from parent may break permissions/policies designed with the default inheritance option enabled. Use this option after a careful review.

Example:If the share is already set to inherit permissions from parent object then this option will remove the inheritance from parent object.

Click Next to proceed to the Next step.

Step 5: Save as template:

Enter a name and description to save these settings as a template for reuse later.



click Next to proceed to the next step.

Step 6: Summary

  This step displays the summary of all the input data along with the selected options.



 
Click Finish to complete the Grant Permissions wizard.

Permissions will be granted as specified in the wizard. The summary of all the input data would be shown below along with the option "View change log" to view the task completion status.