How to Stop SharePoint Child Folders Inheriting Parent Permissions
Question details
The user needs to understand why a SharePoint subfolder with unique permissions still grants access to unintended users and how to properly restrict access without relying on parent folder sharing.
- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- Managing user access to specific subfolders while preventing users added to the parent folder from automatically gaining access.
- Observed behavior
- Subfolders with unique permissions remain accessible to users who are added to the parent folder via sharing links or group memberships.
Ensure you have Site Owner or Full Control permissions for the SharePoint site or document library before attempting to modify folder inheritance and manage access.
Break Inheritance and Manage Direct Access for the Child Folder
Stop the child folder from inheriting permissions from the parent folder and remove unwanted users to strictly control access.
SharePoint folders inherit permissions from their parent by default. Even if you try to restrict a child folder, sharing the parent folder might still grant access through broad links or group memberships. To secure a child folder, you must explicitly break inheritance and use Direct Access instead of sharing links.
Navigate to your SharePoint document library, right-click the child folder you want to restrict, and select "Manage access".
In the Manage Access panel, click the three dots (More options) in the top right corner and select "Advanced settings" to open the classic permissions page.
Click "Stop Inheriting Permissions" in the top ribbon menu to break the permission link with the parent folder.
Select the checkboxes next to the users or groups you want to restrict, then click "Remove User Permissions" in the ribbon.
To add specific users back securely, click "Grant Permissions", enter their names, uncheck the option to "Share everything in this folder" (if prompted), and assign them the appropriate permission level.
Remove Broad Sharing Links on the Parent Folder
Prevent users from bypassing child folder restrictions by controlling how the parent folder is shared via links.
Simplify Your Document Management with WPS Office
Dealing with complex SharePoint and Office 365 permissions can be frustrating. If you are looking for an easier way to create, edit, and collaborate on documents without the hassle, WPS Office offers a free, lightweight alternative to Microsoft Office with a highly familiar user interface and seamless file compatibility.
- 1. Download WPS Office: Visit the official WPS website to download and install the free WPS Office suite on your device.
- 2. Sign in for cloud features: Create a free account to access WPS Cloud, making file sharing and document collaboration straightforward.
- 3. Open existing Office files: Open your existing Word, Excel, or PowerPoint files directly in WPS Office with zero formatting loss.
Frequently Asked Questions
Why does a user still have access to a SharePoint folder after I stopped inheriting permissions?
The user may still have access through a previously generated sharing link at the parent folder level, membership in a Microsoft 365 Group, or site-level permissions (like being a Site Owner). Check the 'Manage access' panel for the child folder and delete any active sharing links granting them access.
What is the difference between Direct Access and Sharing in SharePoint?
Direct Access grants specific individuals explicit permissions to a file or folder without creating a URL link. Sharing typically generates a shareable link (such as 'People in your organization') which can sometimes be forwarded or inadvertently bypass specific subfolder restrictions if applied at a higher level.
If I share a parent folder, do users automatically get access to a subfolder with unique permissions?
It depends on how the parent is shared. If the parent is shared via a broad sharing link, that link might grant access to the entire folder tree, bypassing broken inheritance. To prevent this, assign Direct Access at the parent level rather than using shareable links, and explicitly remove those users from the child folder.
How can I test if a user has access to a specific SharePoint folder?
You can use the 'Check Permissions' tool. Go to the folder's 'Manage access' panel, click 'Advanced settings', and select 'Check Permissions' in the ribbon. Enter the user's name or email to see their exact permission level and where it originates from (e.g., a specific group or direct assignment).
