Managing Collaboration

Managing Collaboration Permissions

Users and groups can:

• Share files and folders through the end user portal.
• Create public links for access to files and folders
• Create team projects: shared folders without individual owners.

To set collaboration permissions, you define rules that give the required permissions to specified users or user groups:

• User rules get precedence over group rules.
• Deny rules have higher priority than Allow rules.

To add a collaboration permissions rule:

1. Select Settings in the navigation pane.
   The Control Panel page is displayed.
   
2. Select Collaboration Permissions under CLOUD DRIVE in the Control Panel page.
   The Collaboration Permissions window is displayed.
   
3. Click Add to define a permission.
   1. Click the user in the Name field to select to whom the permission applies.
      
      1. Unless the user is All Users, select the type of user or group.
      2. In the Quick Search field, enter a string that is displayed anywhere within the name of the user.
         A list of users and groups matching the search string is displayed.
      3. Select the user or group and click SAVE.
   2. In the Share Files & Folders column select Allow or Deny to allow or deny sharing files and folders with specified users, groups, or external email addresses.
   3. In the Create Public Links column select Allow or Deny to allow or deny creating a public link to any folder or file and then sending the link to anyone else they choose.
   4. In the Max Public Link Permission column select the link permission: Read/write, Read Only, or Preview Only.
   5. In the Create Team Projects column select Allow or Deny to allow or deny creating shared folders that are not displayed as shared by an owner because they are intended for team collaboration.
4. To delete a permission, click in the row with the permission to delete.
5. Click SAVE.

Setting Collaboration Policy

You can implement a corporate data sharing policy for collaboration with external users. You can define a policy to restrict external collaboration by specific users or groups and define the sanctioned collaboration domains.

Collaboration policy rules control:

• Which portal members can enable which external users to collaborate on data stored on the portal.
• What minimum type of authentication external users need if portal users share data with them.
• The highest level of access permission the external users are allowed by the specified portal members.

Optionally, each policy rule can apply to a subset of your portal members, allowing different collaboration rules for different portal users.

To add a collaboration policy rule:

1. Select Settings in the navigation pane.
   The Control Panel page is displayed.
   
2. Select Collaboration Policy under CLOUD DRIVE in the Control Panel page.
   The Collaboration Policy window is displayed.
   
3. Click New to define a policy.
   1. Click the user in the From field to select to whom the policy applies.
      
   2. Unless the user is All Users, select the type of user or group.
   3. In the Quick Search field, enter a string that exists anywhere in the name of the user.
      A list of users and groups matching the search string is displayed.
   4. Select the user or group and click SAVE.
4. In the To Email column, specify which external recipient email addresses the policy will apply to. You can enter an email address or you can specify an entire domain, by using wildcards. For example, to specify all gmail addresses, enter *@gmail.com or @gmail.com
5. In the Action column select Allow or Deny to allow or deny the specified user or user group to collaborate on files and folders with external users at the specified email addresses.
6. In the Authentication column, set which authentication methods the external users will have to use in order to access the shared files or folders:
   Let User Choose – The end user chooses which authentication method to use to authenticate the external user for access to the shared file or folder.
   Email – The invitation recipient receives a time limited authenticated link to the file or folder. On every access, a new 6 digit passcode challenge is sent to the recipient by email which must be entered to access the file or folder.
7. In the Max permission column, set the highest permission level that the user can grant the external collaborator on any shared files:
   • Read/Write
   • Read Only
   • Preview Only
   Note

   Preview Only share recipients are able to view the file which is protected with a watermark that includes the recipient’s email or IP address. Users with Preview Only permission are unable to download or copy the file. The file can also not be printed as a file. In addition, content shared in Preview Only mode cannot be synchronized for offline access by CTERA Devices, for example, CTERA Edge Filers or CTERA Mobile.

8. You can move rules up and down the list on the policy page. When a user invites an external user to collaborate, the first rule on the list, from the top downwards, that matches the external users' email address applies.
9. Click SAVE.