Item permissions are set at any level. For the purpose of this help, the following item permissions example is specifically for a folder. All other items have similar options.
All permissions settings selections are displayed here. Granting or denying permissions for additional Companies, Groups or Users is done by making the appropriate selections from Grant Permissions, adding the additional selections in the lower part of the box and checking the appropriate boxes to grant or deny.
Inherited permissions will display "grayed out" to prevent an override of intended inheritance rules.
Best Practices for Setting PermissionsPermissions are normally set on folders either when you add the folder, or later by editing the folder. Group is the most common and most frequently recommended method for managing user permissions, but any combination of Company, Group and User permissions may be selected within the Permissions tab.
The default for a folder is always to "Inherit permissions from parent" so that any folder added will always maintain the identical permissions of its parent folder if no permission changes are made by the administrator. If the inherited permissions should not apply to a specific folder, you will need to remove the check box from the permissions settings for the "Inherit permissions from parent" property. This will allow the permissions that are inherited from the parent to be removed from this folder.
As a best practice, avoid the use of "Deny" settings as Deny should only be used in exceptional circumstances within which it is more feasible to deny a specific user or group than it is to simply not permit their permission in the first place.
See Permissions Examples to review example permissions diagrams.