Permissions can be set based on:

  • Users (including a guest access option)
  • Groups
  • Gateways

There are available three permission levels:

  • Read/Write (RW)
  • Read-Only (RO)
  • No Access (NO)

The access permission for a particular user will be determined by the most restrictive permission control. For example, if a user has Read/Write permission to a share, but the gateway has Read-Only access to the share, then the user will only be able to read.

User and Group Permissions

Set the SMB share access permissions by users and groups.

Note: In Active Directory and Azure AD modes, admins must first import users and groups before they will appear in this tab.

Default Access

The permissions for all users in the system.

Read/WriteUsers can read and write files to the share. Users must be authenticated to access the share. Admins can specify users/groups to a Read Only exclusion list.
Read OnlyUsers can read files from the share. Users must be authenticated to access the share. Admins can specify users/groups to a Read/Write exclusion list.
No AccessUsers cannot see the share. Admins can specify a Read Only and Read/Write exclusion lists.

Allow Guest Access

If Allow Guest Access is enabled, users that login with a non-existent account will automatically be allowed access to the share as the guest user.

Exception List

Use exceptions to set Read/Write or Read-Only access for specific users and groups. By default, both users and groups are listed in this section. You may filter the list by name or by type (User, Group, or All).

Forbid Share Link

Prevents the user from sharing links to files using the sharing option in the Files section.

Edit Gateway Permissions

Set which gateway has access to the share. By restricting gateway permissions, you are creating access restrictions based on location. 


The Access column set the access permissions for the share. The available options are:

  • Read/Write (RW)
  • Read-Only (RO)
  • No Access (NO)


Check the Prefetch box to force the gateway to download all new and modified files immediately. This allows a user to access new and modified files from the local cache without waiting for a download from the cloud.  If prefetch is not enabled, files that are not in the cache will not be downloaded until they are accessed.