Different Permissions via Entra ID Groups on Folder and Boards

Question

Hello,We are currently setting up a permissions concept in Lucid and would like to manage access via Microsoft Entra ID groups.Our goal is:Entra group has View access on a folder.	The same Entra group has Edit access on a specific board within that folder.At the moment, it seems that folder permissions are inherited by all boards and group-based permissions cannot be overridden on board level. We can only grant different permissions to individual users.Is there any supported way to achieve this scenario with Entra ID groups?Alternatively, are there any best practices for managing different permissions between folders and individual boards while using Entra ID group-based access management?Thank you for your support.

kmougammadou · Answer

Hi ​@Ella, thanks for your post in the community!Yes, this setup is supported in Lucid!Lucid operates on a principle where users and groups default to the highest level of access permissions granted between a folder and its contents.If you give an Entra ID group Viewaccess to a folder, and then explicitly share a specific board inside that folder with the same Entra ID group with Editaccess, members of that group will be granted Editaccess on that specific board while retaining Viewaccess for everything else in the folder.Users will never have fewer permissions to a document/board than they do to the containing folder. Therefore, while you can grant higheraccess on individual boards (e.g., View at folder level -> Edit at board level), you cannot restrict access lowerthan the folder level (e.g., Edit at folder level -> View at board level).To set this up:1. Share the parent folder with the Entra ID group and assign Viewaccess.2. Open the specific board within that folder, click Share, add the Entra ID group, and assign Editaccess.For more details on managing folder and document permissions, please review our Create team foldersarticle.Please let me know if you have any additional questions or concerns.

Create an account in the community

Log in to the community