# Permission Management Overview We designed permissions to be managed at the workspace, drive, folder, and file level. Anyone that is not a workspace member or admin is considered a **workspace guest**. {% embed url="" %} For a more detailed overview, visit the [workspace-and-drive-permissions](https://academy.shade.inc/sharing-and-collaboration/workspace-and-drive-permissions "mention") page: ### Workspace Permissions #### Adding workspace members: Workspace members can be invited by navigating to the workspace Settings > Members tab. Workspace members and admins have the following permissions: #### **Workspace Admins** Member permissions and: * Add workspace members * Control billing * View workspace usage details * Manage all drives and permissions across the workspace Workspace owners cannot leave a workspace without transferring ownership to another admin #### **Workspace Members** Your core team that can: * Create new drives * Manage drive configurations for drives where they have been granted Manager permissions * Manage drive access for guests on drives where they have Manager permissions * Manage file and folder permissions for guests on drives where they have access * Mount Drives **Note:** Workspace members do not automatically have Manager permissions on existing drives. Admins must explicitly grant Manager permissions on each drive, or set default inheritance permissions for the workspace. #### Viewing All Permissions for a Workspace Workspace admins can see a global view of all permissions from the workspace Settings > Members page. Selecting an individual on this page will reveal the tree of what they have access to. #### Workspace Permission Inheritance Workspace admins can manage the **default inheritance permissions** of drives. These define the access level workspace members will have to newly created drives and can be applied to existing drives. The default inheritance permissions are `Full Access` by default, but this does not automatically grant Manager permissions unless explicitly set. **Important:** Members must be explicitly granted Manager permissions on each drive by admins, or admins can set default inheritance permissions for the workspace that will apply to new drives. ### Drive Permissions #### Adding drive members Drive members can be invited by navigating from the workspace Settings > \[drive name] > PermissionsMembers tab. Workspace members will only have the permissions explicitly granted to them on each drive: **Viewer:** Only view and download files **Downloading:** Can view and download files **Commenting:** Viewer permissions plus commenting **Editor:** Commenting permissions plus file deletion, renaming, and reorganization **Full Access:** Editor permissions plus file-level permission management **Drive Manager (Admin):** Full Access permissions plus drive renaming, deletion and drive-level permission management. #### Viewing All Permissions for a Drive Drive managers and workspace admins can see a global view of all permissions from the workspace Settings > \[drive name] > PermissionsMembers page. Selecting an individual on this page will reveal the tree of what they have access to. ### File and Folder Permissions Workspace and drive members will already have access to all files in their respective workspace or drive based on their drive-level permissions. Guests can be invited to files and folders by right clicking on the asset or asset path. Guests can be invited to files and folders with the following permissions: **Viewer:** Only view and download files **Commenting:** Viewer permissions plus commenting **Editor:** Commenting permissions plus deletion, renaming, and reorganization **Full Access:** Editor permissions plus permission management ### Published Links Published links are great for inviting external collaborators that need temporary access to a folder or file. Files and folders can be published at following levels: * Viewing: View and download the asset * Downloading: Can View and Download the asset * Commenting: Viewing plus commenting * Editing: Commenting plus uploading, renaming, and deletion * Full Access: Can Edit and also share with others --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://academy.shade.inc/getting-started/permission-management-overview.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.