For a list of Admin-level permissions, click here or skip to the bottom of this article.
For E-Signature related permissions, click here to skip to that section of this article.
How to Manage Permissions
- People > Manage Users (or Browse Employees or Browse Clients)
- Browse or search for your user. Click the user or the Manage icon on the right to open the user profile.
- Modify permissions as needed, then Save.
Default Employee Permissions
When creating a new employee, the following permissions are granted by default. You can modify these settings during the user creation process.
Note: A grayed setting indicates a permission that the creating user does not have access to or is not permitted to give to others – therefore, they cannot grant that permission to another user.
Date Created, Email Address, First Name, Last Name, Company name.
Modify the user’s default Notification frequency settings.
Default Email Language
Modify the user’s default email notification language.
You may select a maximum monthly bandwidth allowance for the employee. This limit will prevent the employee from personally uploading and downloading more data than you allow them. It will also apply to all of their folders, so that they may not share files with others more than you would like for them to. Note: Employee bandwidth limits can also affect clients that the employee works with by limiting how much they may download from the employee’s folders. This is used by some accounts where employee use may need to be limited to prevent bandwidth overages.
Whether the customer is utilizing ShareFile Credentials or Two-Step Verification.
Change their password
If a user may change their password, they can use the ‘Forgot Password’ link on the login screen if they ever forget the password. If this is not marked, they will need to contact an employee who can manage employee permissions for help logging in.
Access Personal Settings
In personal settings a user can manage their name, company name and avatar. They will be able to update or change their password on this page if they have the permission to change their password.
Access company account permissions
This will allow the user to access and change the account wide permissions. For a full detailed list of the options they will be able to access, see article here.
Files and Folders
Create root-level folders in “Shared Folders”
Employee users may be allowed to set up their own folders in the “Personal Folders” section on the account. Some accounts choose to allow employees to set up their own folders within the “Shared Folders” page if they will need to set up their own individual employees or clients. If you have a main administrator who would prefer to set up and manage the folder structure for all users, this can be disabled. Please note that employee users may also be able to create subfolders within folders where they have ‘Upload’ access.
Use personal File Box
The File Box is a personal storage space where employees may store files for a limited period of time. This space is not generally a collaborative or shared space, although some users may be given access to see other employee’s File Boxes. If you do choose to take away a user’s access to the File Box, they will not be able to use any email plugin tool or add files from their computer when creating a Share message or Link.
Be added to file drops
This will only be available if File Drop is enabled on your account. This will allow users who create new file drops to list this employee as a contact that clients may select to send files to through a form.
Access other users’ File Boxes and Sent Items
Allowing the employee access to the File Box and Sent Messages of other users allows them to check into what other users have stored outside of the primary folder structures and what has been sent from the account.
Depending on your account features, you may see options for E-Signature users in this section. If you don’t have this feature and would like to learn more about this, please contact our sales team to see how you can get this on your account – 1-800-441-3453
Send document for e-signature
*Uses one e-signature license*: This setting provides an employee user the ability to send documents for an electronic signature. Without this permission the user will not see the options “Send for Signature” or “Sign Yourself”.
View all e-signature documents:
This permission will provide the user access to all documents sent for e-signature.
Manage e-signature templates:
This permission will provide the user the ability to manage all e-signature templates.
This will allow the employee to see the People tab in the navigation bar and to add new users to the account. They will also be able to edit settings for any clients that they create. Note: Editing a client user’s email address requires the Manage Employees permission.
Employees may be allowed to create other employee users on the account and edit employee user access. This permission is also required for editing a client user’s email address that the user did not create themselves. Please note that this only allows employees to grant other employee users the Basic permissions that they themselves have on the system. To grant another user Admin Privileges, you must have the Delegate admin privileges to other employee users permission.
Delegate admin privileges to other employee users
Allow the user to grant Admin Privileges to other employees. Employees will only be able to allow others privileges that they themselves have been granted.
Edit the shared address book
The Shared Address Book is available to employee users on the account so that they may quickly and easily pull up contact information for users on the account. If this is checked, the employee will be able to add users to the Shared Address Book to allow others to see their contacts on the system.
Share distribution groups
If this permission is enabled, the employee user will be able to create a Shared Distribution group.
Edit other users’ shared distribution groups
When setting up a new Distribution Group, users will have the option to share the group with all employees. If this permission is enabled, the employee user will be able to add more users to a group that has been created on the system and shared with others.
Manage Super User Group membership
Allow the user to add or remove employee users from the Super User Group. Members of the Super User Group are added to all folders on the account (including personal folders) with admin level access.
Company Account Info
Edit account appearance
Allow the user to configure account branding and appearance settings.
Reports on many aspects of account use including general activity and folder access are available in the Settings > Admin Settings > Company Account Info > Reporting section to employees with this permission enabled.
View notification history
Allow the user to view the history of email messages sent from ShareFile, including system notifications.
Configure Single Sign-On Settings
Allow the user to configure SSO settings in Admin Settings > Security > Login
View/edit billing information
Allow the user to view and modify billing information for the account. This permission also authorizes the user to contact ShareFile Support for billing assistance.
Request Plan Changes
Allow the user to submit plan changes in the Admin Settings section of the account.
View receipts and billing notifications
The Receipts & Billing Notifications link in the Admin Settings > Billing section will allow any user with this permission enabled to download copies of any receipt or invoice for the account.
*You may or may not see the below settings on your user page. These settings will display only if you have the feature enabled on your plan type.
Manage folder templates
Enabling this setting will allow the employee to see available Folder Templates in the Admin section and to edit or make new folders. This is generally recommended to employees who will be setting up or assisting with managing many client folders.
Manage remote upload forms
Allow the user to create and manage Remote Upload Forms in Admin Settings > Advanced Preferences.
Manage file drops
This permission allows the user to see the File Drops link in the Admin section and to create links that allow users to upload files to a specific employee of their choosing.
Create and manage Connectors
This permissions grants the user the ability to create and manage new Connectors. This permission is only available to ShareFile users on select plans.
Create Network Share Connectors
This permissions grants the user the ability to create and manage new Network Share-type Connectors. This permission is only available to ShareFile users on select plans.
Create SharePoint Connectors
This permissions grants the user the ability to create and manage new Sharepoint-type Connectors. This permission is only available to ShareFile users on select plans.
Create and manage Zones
This permissions grants the user the ability to manage which zone a folder’s data is housed within. This permission is only available to ShareFile users on select plans.
Select StorageZone for root-level folders
In order to change another user’s default storage location, membership to the Super User Group is required. This permission is only available to ShareFile users on select plans.
|Access company account permissions
|Create root-level folders in “Shared Folders”
|Access other users’ File Boxes and Sent Items
|Manage employee users
|Delegate admin privileges to other employee users
|Manage Super User Group
|View notification history
|Configure single sign-on settings
|View/edit billing information
|Request plan changes
|Manage folder templates
|Manage remote upload forms
|Manage file drops
|Create and manage connectors
|Create and Manage Zones