---
title: Permission system
description: The system introduces department roles, project permissions, file access control, sharing permissions, customized file permissions and online editing permissions.
slug: permissions
lang: en
category: Permissions And Security
category_order: 4
order: 1
keywords:
  - Permissions
  - ACL
  - File access control
  - Project permissions
  - Sharing permissions
---

# Permission system

Babel's permission system covers file list, search, preview, editing, synchronization, disk mapping, sharing, AI answering and automated tasks. Permissions are not a single switch, but are determined by corporate roles, department roles, project member permissions, file access control, custom file permissions, sharing permissions and corporate security policies.

## Permission Judgment Level

| Hierarchy | Control Object | Example |
| --- | --- | --- |
| Enterprise roles | Enterprise-level management behaviors | Super administrator, security officer, security auditor, file administrator |
| Department roles | Department folders and department members | View, upload, download, edit, delete, department file management, sub-department management |
| Project permissions | Project folder | Project leader, project assistant, project members, member validity period |
| File access control | Single file or folder | Set invisible, viewable, editable, and validity period permissions for a member or role |
| Customize file permissions | Share, project, access control | Permission names and combinations defined by administrator |
| Sharing permissions | External or internal recipients | View, download, edit, comment, validity period, password, anonymous access |
| Security policy | Enterprise or department | IP policy, Mac binding, watermark, secret level, external sharing policy |

## Detailed description of the white paper

Permission management of BabelBird Enterprise Drive is one of its core functions. It runs through the entire system to ensure that users can access and manage files safely and compliantly. The Babel permission system includes two main aspects: role permissions and file permissions.

### Role permissions

- Define roles: Babel allows you to define different roles within the enterprise. Each role can include a specific set of permissions to control users' access and operations in department folders. These roles can be created based on department management needs, such as "Department Administrator", "Department Member", etc.

- Department role permissions: Each department member can be assigned different access permissions based on their roles in different departments. This means that users can have different levels of permissions in different departments.

- Flexible management: Babel's role permissions support multiple department roles, and the same role can be used in different departments at the same time. After the permission content of a role is changed, the permissions of members using the same role will also be changed accordingly.

- Permission combination: Babel bird role permissions support the combination of more than 30 optional permissions to achieve refined user permission control. These permissions cover various access and operation behaviors, such as preview, upload, download, edit, etc.

- List of optional permissions for roles:

### File permissions

- Custom permissions: File permissions can also be customized in the background, and users can choose specific permission types and names. These custom file permissions will be used for file sharing, project management, and file permission control.

- File access control: File access control allows department members to set specific access permissions on files and folders to override department role permissions. This means that the access behavior of a certain file or folder in the department can be more precisely controlled. File access control only applies to department members and project members.

- High priority: File access control permissions have a higher priority. If file access control is set, it will override the member's department role permissions or project permissions. Users can set file access permissions as needed.

- Department File and Folder Control: Users can enable file access control for department files and folders to control access to specific files or folders.

- Validity period: File access control can set a validity period. After the validity period, the constraints of file access control will become invalid. For example, if a department member who does not have file editing permissions is given the editing permissions for the file, the validity period is 3 days. After 3 days, the permissions granted by the file access control will expire, and the department members' permissions on the files will become the permissions of the member role.

### Summary

The permission management of BabelBird Enterprise Drive is a comprehensive system that can meet the specific needs of different departments and projects of the enterprise. Role permissions and file permissions work together to ensure that users have precise control over file access and operations. This feature helps improve security, compliance and productivity.

## Relationship with online editors

Online editing, online editing only, client download, client editing, upload new version, and preview permissions can be combined. A typical security policy is to allow outsiders to collaborate or preview online, but not to download source files; it can also allow project members to access certain project files only within the validity period.