D3L3: Describe Permissions

By Brandi Girtman

D3L3: Describe Permissions

​Configure File & Share Permissions

​To configure file permissions for a group of users:

• Right-click a folder. Click Properties. Click Security Tab. Click the Group

​

To configure share permissions for a group of users:

• Right-click a folder. Click Properties. Click Sharing Tab. Click Share​

​

​

​

​

​

Principle of Least Privilege

• ​Only give enough permissions for users to do their job

​Full control: Allows users to read, write, change, and delete files and subfolders, as well as edit permissions and take ownership of files.

Moving or Copying Files and Permissions

Moving a file

• takes the original file and puts it in a new location on the computer

• ​Moving a file within the same drive - permissions stay the same as before

• ​Moving a file to a different drive or folder - permissions do not stay the same

Copying a file

• Creates a new file in a new location & leaves the original in the original location

• ​Copying to a different drive - permissions change to match the new location

• ​Copying within the same drive - permissions change to match the new location

  • ​this is called inheritance

Multiple Choice

When you copy or move files and folders to a different partition (drive), what happens to their permissions.

• The source permissions are retained

• The source and destination permissions are combined

• The destination folder permissions are inherited

• All permissions are lost

Basic and Advanced Permissions

​Basic Permissions

• ​Groups of permissions set on objects such as files and folders

• ​Types of basic permissions: Full control, Modify, Read & Execute, List folder contents, Read, and Write 

  • ​Modify lets users change the existing file

  • ​Write lets you add new files

Advanced permissions

• ​More granular (detailed) than basic permissions

• ​There are 14 advanced permissions

• Right-Click a folder/file, Security tab, Click Advanced​

Multiple Select

Which permissions are considered basic?

• Modify

• Delete

• Full Control

• Read

• Change

Multiple Choice

What is an advanced permission?

• Read

• Execute

• Modify

• Take ownership

• Write

Ownership and Resultant Permissions

• ​Every resource has at least one user or group that has ownership of it​

• A resource owner has full control of it

• ​Ownership is changeable - this is known as delegation

  • Also should change ownership of subcontainers & objects within a folder

• ​​The Effective Access tab shows all permissions users have on a resource.

Multiple Choice

When ownership of an item is delegated to a user or group, the new owner will have ________ of the resource.

• full control

• partial control

• full ownership rights

• partial ownership rights