In addition to project-level permissions, permissions can be set at the folder level. Admins can use folder-level permissions to grant users access to folders without granting them access to an entire project.
Folder permissions stack onto project permissions, meaning folders and objects adopt the most permissive access policies. Folders can never be less permissive than their parent project. For example, if a user is granted Read access on a project but is granted Write access on a folder in that project, the user will have Write access on the folder and its contents (and Read access to everything else in the Project). We recommend applying the least permissive access policies to projects and granting additional access to their contained folders, as needed.
Folder permissions are currently not supported in the warehouse or insights dashboards. No user will ever see data they don't have access to, but if they don't have at least Read access at the project level they will not be able to find the objects from folders they have access to in the warehouse or insights dashboards. All other features like search, insights analyses, and the project pane will work as expected.
Enabling and disabling folder permissions
- In the left-side menu, click your avatar to open the personal menu and select Tenant Admin Console.
- Select the Settings heading, then click Permission Controls in the left nav.
- Turn on or off folder permissions as appropriate.
Folder permissions cannot be added when folder permissions are turned off, and any existing permissions must be removed before turning off the feature. If you have admin access to the particular folders where permissions are set, Benchling will remove any existing folder permissions as part of turning off folder permissions. If you don't have admin access to those folders you'll instead get a message indicating which folders need to be updated and no changes will be made.
Manage permissions on a folder
- In the left-side menu, click the briefcase icon to access your projects and folders.
- If a user has access to a folder but not the parent project, only the folder displays in the Projects tab of the workspace.
- Select the desired folder, then click the gear icon next to the folder name.
- Click Manage access.
- Add new collaborators in the top search bar by searching for user, team, organization or app. Specify the level of permission that should be granted to the user in the right dropdown and click add.
- Update permissions for existing users in the Collaborators section using the dropdowns under Access Policies. Click Done to save changes.
- Remove users from the folder entirely by clicking the … icon next to the user, team, organization, or app.
Folder permission levels
For each collaborator (user or group of users), set a permission level. The table below describes the actions each permission level can take.
Collaborator action | None | Read | Append | Write | Admin |
View entries and data in a folder | ✘ | ✔ | ✔ | ✔ | ✔ |
Create entries and data in a folder | ✘ | ✘ | ✔ | ✔ | ✔ |
Edit entries in a folder | ✘ | ✘ | ✘ | ✔ if author | ✔ |
Update project permissions | ✘ | ✘ | ✘ | ✘ | ✔ |
Create or move entities into a folder | ✘ | ✘ | ✔ | ✔ | ✔ |
Archive, unregister or edit entity metadata | ✘ | ✘ | ✘ | ✔ | ✔ |