Introduction
In SAP Analytics Cloud (SAC), controlling who can access content like dashboards, models, and stories is critical for protecting sensitive information. While roles determine what users can do, folder-level permissions control where they can do it.
This article provides an overview of the different folder types in SAC, how to assign access permissions, and how to share or restrict content based on your security needs.
Understanding Folder Types in SAC
SAC organizes content into three main types of folders:
Public Folder
Root-level folder that houses all shared environments and team folders. Access must be explicitly granted.
Team Folder
Automatically created when you assign folder access to a team. Members can typically create, edit, and delete content within this space.
User Folder
A private folder unique to each user. Other users can’t access it unless content is explicitly shared. Deleted if the user is removed from the system.
💡Tip: Use Team Folders whenever possible to manage access efficiently at scale.
Folder Permission Levels
You can assign the following permission levels to individual users or teams for any folder:
| Permission | Access Details |
|---|---|
|
View |
Allows users to view content within the folder but prevents any changes. Best for stakeholders or reviewers who only need read access. |
|
Edit |
Grants the ability to view, create, and modify content in the folder. Suitable for team members actively working on dashboards or reports. |
|
Full Control |
Provides complete access, including editing folder-level settings, sharing with others, and deleting content. Use with caution—typically for admins or content owners. |
|
Custom |
Allows a tailored set of permissions to be applied. Useful when specific, non-standard access is needed for certain users or roles. |
Managing Folder Sharing
When deciding how to share content, consider the following approaches:
- Team-Based Sharing: Best for groups that collaborate regularly. Assign folder permissions to teams so new members automatically get the right access.
- Individual Sharing: Useful for one-off situations where specific users need access.
- Least Privilege: Always start with the minimum access necessary (e.g., View Only) and increase as needed.
💡Note: Even if a user has role-level permissions (e.g., Content Creator), they still need access to the relevant folder to work within it.
How to Restrict Folder Access
1
Go to the Files section in the SAC navigation panel.
2
Locate the folder you want to manage and select the checkbox beside it.
3
Click the Share icon in the top toolbar.
4
In the sharing panel, add users or teams by searching for them.
5
Set the permission level (View, Edit, Full Access, or Custom) for each entry.
6
Click Save to apply changes.
💡Tip: After assigning access, it’s a good idea to test permissions by logging in as or with a user who has the assigned access to confirm it’s working as expected.
Summary
Folder access in SAC lets you control who can see or edit content, keeping things organized and secure.
Want to learn more about access and permissions in SAC? Explore the full SAP Booster course here.
