This article is also available in:

Folder Permissions

🔐 Folder Permissions

"Control who sees what."
Flexible, document-based permissions for precise access control.

Inside Brainframe, everything is treated as a document—policies, procedures, risks, non-conformities, and more. This enables a flexible permission model through folder permissions.

📌 A single folder can have multiple views, each with its own permissions.

Example: A folder named Product X could have views for Security, Documentation, and GDPR, each visible to different audiences, as explained in Folder management.

1️⃣ Opening the Permissions Screen

You can configure permissions for all folders except INBOX.

Click on Modify folder.

Select the Permissions button.

This opens the full Permissions screen:

📌 Users can only see folders where they have at least READ permission.

2️⃣ Assigning Permissions

Start typing the name of an existing user, or enter the email of a new contact to invite them.

📌 Permissions can be assigned to individual users or groups.

READ permissions allow:

Opening all documents in the folder.
Approving documents with an unassigned approval, or those assigned directly.
Performing KPI/Risk readings on documents.

READ + WRITE permissions allow everything from READ plus:

Creating and deleting documents in the current folder.
Modifying all aspects of documents (title, properties, planning, etc.).
Moving or linking documents to other folders.

READ + WRITE + MANAGE permissions allow everything above plus:

Modifying folder and view names.
Changing folder permissions.
Creating, moving, or deleting subfolders.

You can select multiple users or groups at once.

Current permissions can be applied to all subfolders.

Due to our ability to link folders in multiple places, and contrary to how typical folder permissions inherit permissions, in Brainframe folders are always only configured on the current folder (and not on its subfolders). To simulate inheritance you can use step 5 and 6 explained above

3️⃣ Best Practices

👥 Use groups instead of individuals when possible to simplify management.
🔄 Apply permissions to subfolders if consistent access is required.
🚨 Review MANAGE access carefully—limit it to trusted admins.
📝 Document your permission model for audit readiness.
🔍 Audit permissions regularly to ensure compliance with least privilege.

🎯 Visual Checklist

[x] Permissions screen opened
[x] Correct users/groups added
[ ] Appropriate access level (READ/WRITE/MANAGE) assigned
[ ] Subfolder permissions applied if required
[ ] Permission model documented and reviewed

Updated on: 11/09/2025

Was this article helpful?

Thank you!