Advanced folder permissions is a feature of QNAP NAS provided for you to configure the access control of users and user groups to the folders and subfolders. You can manage folder permissions from Microsoft Windows or the web-based management interface of the NAS without complicated procedure.
The how-to shows you how to configure the advanced folder permissions on QNAP NAS. Note that this feature applies only to QNAP NAS models running firmware version 3.4.0 or later.
Enable Advanced Folder Permissions
To edit the folder permissions on QNAP NAS, simply go to 'Access Right Management' > 'Share Folders' > 'Share Folders' and click the 'Folder Permissions' icon.
- Folder name
- Effective permissions
- Guest access right setting
- Add or remove users and their folder permissions
To configure advanced folder permissions on the NAS, go to 'Access Right Management' > 'Share Folders' > 'Advanced Options' and enable “Enable Advanced Folders Permissions” and apply.
The main difference before and after you enable Advanced Folder Permissions is:
BEFORE you enable Advanced Folder Permissions, all subfolders have the same access permission as their parent folder.
AFTER you enable Advanced Folder Permissions you can configure different permissions for each subfolder.
Note: You can configure file-level permissions by logging in Web File Manager.
Configure Advanced Folder Permissions & Create Private Folders
The following example shows you how to create private folders for different users after enabling Advanced Folder Permissions.
First go to 'Access Right Management' > 'Share Folders' and click 'New Share Folder'.
Enter the folder name, Personal in this example, and specify the necessary settings.
Select 'Full access' for 'everyone' and deny access for guest.
You can now edit the folder permissions of 'Personal' by clicking the 'Folder Permissions' icon.
The permissions summary is shown.
- Select the shared folder on the left.
- Find the user 'everyone' in the list.
- Make sure everyone has Read/Write permission.
- Select 'Deny access' for Guest Access Right.
- Select 'Only the owner can delete the contents' to disallow users who are not the owner to delete the folders in 'Personal'.
- Click 'APPLY'.
Configure Subfolder Permissions
After applying the permission settings on 'Personal', you can create private subfolders for different users. To do so, follow the steps below.
- Connect to the folder 'Personal' with a valid account who has full access (e.g. admin), and create subfolders 'Tony', 'Steve', and 'Andy'.
- Go to the folder permissions interface of 'Personal'. Select the subfolder you would like to assign permissions (e.g. 'Tony').
Select 'administrators' and 'everyone' from the permission list and click 'Remove'
Click 'Add' and assign Read/Write access for the user 'tony'.
Now only admin and tony has full access to the subfolder 'Tony'.
- Click 'APPLY' to save the settings.
- Repeat the above steps to set the subfolder permissions for the folders 'Andy' and 'Steve'. Note that only 'admin' can delete the folders Andy, Steve, and Tony because the option 'Only the owner can delete the contents' is enabled.
You may verify the permission settings by connecting to the folder from Windows using a different user account. If Tony tries to access to the folder 'Steve', he will be denied.
Users can create their own folders and edit the permissions on Windows
Once the advanced folder permissions have been configured, the users can create their own subfolders and edit the folder permissions in Windows.
Connect to the shared folder 'Personal' from Windows as the user 'tony'. From Windows Explorer, create a folder 'Tony2'.
Right click the folder Tony2 and select 'Properties', under the 'Security' tab click 'Edit'
Remove all existing permissions by clicking 'Remove'. Add the new user 'tony' by clicking 'Add' and allow him to modify this folder as shown in the screen below. Then click 'OK' twice.
- That's it! Now only tony can access the subfolder 'Tony2'. Note that both 'admin' and 'tony' can delete the folder 'Tony2' since the option 'Only the owner can delete the contents' has been enabled on the NAS and 'tony' is the owner as he created the folder.