Owner Permission

Most permission mechanisms utilize a special Owner permission type. Typically, the Owner permission cannot be blocked, revoked, or customized, and provides full access rights.

Different applications and permission mechanisms may interpret Owner permission differently. The table below describes the permission types that File Access Manager treats as an Owner permission. For each platform, the Owner permission is defined and named (queried by the listed name in the AFM query filter controls).

 

Permission Scheme

Description

Microsoft ACL

Microsoft Access Control Lists contain a special field that indicates the owner user/group) of the resource (for example, a file or a folder).

There can be only one entity defined as the Owner (but that Owner can be a group).

Since an Owner has full control of the ACL, the Owner effectively grants all permissions.

The Microsoft ACL Owner applies to:

  • Windows File Server

  • Active Directory

  • Microsoft Exchange / Microsoft Exchange Online

  • NetApp – CIFS

  • EMC Celerra – CIFS

  • EMC Isilon – CIFS

Unix

When a file(/folder) is created in Unix/Linux, its creator is automatically set as the Owner.
Permissions are categorized by:

  • Owner

  • Users in the Owner’s group

  • Other Users

There can only one owner user and one owner group per file/folder.

Since only the Owner (or root) can change file permissions, an Owner effectively grants all permissions.

The Unix file system Owner applies to:

  • NFS (when using Unix permissions, but not NFSv4 ACLs)

  • NetApp – NFS

  • EMC Celerra – NFS

SharePoint

A SharePoint server features Site Collection containers, which function as separate entities, and permission scopes. Different Site Collections may have different users, groups, and permission types.

One or more users in a Site Collection may be defined as a Site Collection Administrator. The Administrator has full control of the resources in the Site Collection’s inner structure.

The SharePoint Site Collection Administrator applies to:

  • Microsoft SharePoint

  • Microsoft SharePoint Online

  • Microsoft OneDrive

Cloud Storage Providers

Typically, cloud storage providers include a permission type named “Owner” which grants full access rights to the resource (file, folder etc.).

The generic “Owner” permission is employed in:

  • Box.com

  • Dropbox

  • Google Drive