Data Organization, Shared Objects, Security

In order to easily grant logical permission combinations, there are specific preset user roles: A user role consists of logical permission combinations. You can also grant detailed permissions. You can grant such permissions by sharing objects. The following information about folders can also be applied to address books and calendars.

Administrator

A folder's administrator owns all permissions for this folder. The owner can grant other users permissions to the folder.

• Folder permissions: create objects and subfolders, rename folders

• Object permissions: read all objects, edit all objects, delete all objects

Viewer

A viewer can read all existing objects. A viewer has not other permissions.

• Folder permissions: view the folder

• Object permissions: read all objects

Reviewer

A reviewer can read and edit existing objects. The reviewer can not create new objects though. The reviewer can not delete objects.

• Folder permissions: view the folder

• Object permissions: read all objects, edit all objects

Author

An author is allowed to change or delete existing objects, to create and edit new objects, and to create subfolders.

• Folder permissions: create objects and subfolders

• Object permissions: read all objects, edit all objects, delete all objects

Detailed permissions

The preset permissions for the user roles can be refined. The following permissions can be granted:

• folders

  • view the folder

  • create objects

  • create objects and subfolders

• read permissions

  • none

  • read own objects

  • read all objects

• write permissions

  • none

  • edit own objects

  • edit all objects

• delete permissions

  • none

  • delete own objects

  • delete all objects

Also see:

• Inviting to a shared item

  Accessing other users' shares

  Editing shares

  Resending an invitation

  Removing shares

  Viewing or editing shares in the Drive app

• Use cases for permissions

• What is the purpose of permissions?

Parent topic: Sharing