# Granting Access to Specific Folders for Users/Groups

> A worked example of hiding every Folder in a Site by default, then granting one Group access to just the Folder it needs.

URL: https://www.hannonhill.com/cascadecms/latest/articles/cascade-administration/permissions/granting-access-specific-folders-users-groups.html
category: Cascade Administration
article-type: how-to
content-kind: faq
release-availability: all
tags: folders, permissions
updated: 2026-10-06

Sites usually have many Folders, and you may want to hide most of them from particular Users or Groups. Consider this structure:

```bash
<Base Folder of Site>
├── FolderA
│   ├── PageA
│   └── PageB
├── FolderB
└── FolderC
```

The goal: let *GroupA* see `FolderA`, but not `FolderB` or `FolderC`.

## Give the Group Read access to the Base Folder

This is what lets *GroupA* see the root of the Site, which is necessary to see anything underneath it.

1. Navigate to `<Base Folder of Site>`.
1. Click **More > Access**.
1. Verify at least one of these is true:
    - **Access level for all users** is set to at least **Read**.
    - *GroupA* has explicit **Read** or Write access under **Grant access rights for specific users and/or groups**.

## Hide the sub-Folders from everyone

1. Navigate to `FolderA`.
1. Click **More > Access**.
1. Under **Access level for all users**, select **None**.
1. Click **Update**.
1. Repeat for `FolderB` and `FolderC`.

At this point nobody can see any Folder in the Site except users with an Administrator Role.

## Grant the Group access to its Folder

1. Navigate to `FolderA`.
1. Click **More > Access**.
1. Under **Grant access rights for specific users and/or groups**, set the **Access level** dropdown to **Read**.
1. Click **Choose Users and Groups** and select *GroupA*.
1. Click **Update**.

## Let the Group edit the pages inside

1. Navigate to `FolderA`.
1. Click **More > Access for Contents**.
1. Under **Grant access rights for specific users and/or groups**, click **Copy user and group access rights from current folder**.
1. At the bottom of the screen, change the **Access level** dropdown next to *GroupA* to **Write**.
1. Click **Merge Access Rights**.

> This walkthrough assigns rights to a Group rather than individual Users. Prefer Groups wherever possible — it makes the environment far easier to maintain.

> This is the most basic approach. Depending on the Access Rights already in place in your Sites, applying it may take some untangling. Reach out to our Support team with details of your setup if you get stuck.