# Training Permissions

**URL:** <https://community.palantir.com/t/training-permissions/5057>\
**Category:** Ask the Community\
**Tags:** workspace, projects\
**Created:** [September 16, 2025, 7:22pm UTC](https://community.palantir.com/t/training-permissions/5057 "2025-09-16T19:22:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![OliverC](https://avatars.discourse-cdn.com/v4/letter/o/77aa72/32.png) [@OliverC](https://community.palantir.com/u/OliverC)\
**Post date:** [September 16, 2025, 7:22pm UTC](https://community.palantir.com/t/training-permissions/5057/1 "2025-09-16T19:22:31Z")

</div>

I have a thorny permissions issue for a training session I am trying to solve, the setup is this:

- I have a project space that all my users have access to

- I want them to work in their own sandbox folders within the space and copy a template I provide.

- I don’t want them to be able to mutate the template.

- So they basically need edit permissions on the project, but view only permissions on the resources I provide within that project.

I know this is doable with marketplace but I am avoiding the complexity. I am wondering if it is possible to do with just permissions ?

---

<div class="post-metadata">

**Author:** ![joshOntologize](https://yyz1.discourse-cdn.com/palantir/user_avatar/community.palantir.com/joshontologize/32/4460_2.png) [@joshOntologize](https://community.palantir.com/u/joshOntologize)\
**Post date:** [September 16, 2025, 10:57pm UTC](https://community.palantir.com/t/training-permissions/5057/2 "2025-09-16T22:57:02Z")

</div>

Hey,

This works if you:

1. Set the default role to Viewer for the project itself,
2. On the Project level, toggle on the option for `Allow resource level role grants` (see screenshot),
3. Create a subfolder (i.e., **Sandboxes** ),
4. Click on the subfolder (so it’s highlighted blue, don’t go into it), then explicitly grant the _Editor_ or equivalent role on that subfolder

This will allow users to create a subfolder (i.e., with their name) that they can create resources in while referencing the view-only core assets at project-root.

Hope this helps!

 ![CleanShot 2025-09-16 at 18.53.06@2x](https://canada1.discourse-cdn.com/palantir/original/2X/8/849769c9190953ca1e311bd7e548f5d3288d91d2.png)

---

<div class="post-metadata">

**Author:** ![system](https://yyz1.discourse-cdn.com/palantir/user_avatar/community.palantir.com/system/32/3_2.png) [@system](https://community.palantir.com/u/system)\
**Post date:** [December 17, 2025, 6:57am UTC](https://community.palantir.com/t/training-permissions/5057/3 "2025-12-17T06:57:47Z")

</div>

Closed on December 17, 2025, 6:57am UTC

This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.