Training Permissions

[OliverC]

I have a thorny permissions issue for a training session I am trying to solve, the setup is this:

• I have a project space that all my users have access to

• I want them to work in their own sandbox folders within the space and copy a template I provide.

• I don’t want them to be able to mutate the template.

• So they basically need edit permissions on the project, but view only permissions on the resources I provide within that project.

I know this is doable with marketplace but I am avoiding the complexity. I am wondering if it is possible to do with just permissions ?

[joshOntologize]

Hey,

This works if you:

1. Set the default role to Viewer for the project itself,
2. On the Project level, toggle on the option for Allow resource level role grants (see screenshot),
3. Create a subfolder (i.e., Sandboxes),
4. Click on the subfolder (so it’s highlighted blue, don’t go into it), then explicitly grant the Editor or equivalent role on that subfolder

This will allow users to create a subfolder (i.e., with their name) that they can create resources in while referencing the view-only core assets at project-root.

Hope this helps!