What is a best practice for managing folder security?

• A. Assign access using Groups
• B. Give CLM Users access to all folders but restrict CLM Viewers to only the folders they will need
• C. Give all users the most restrictive access possible and then one by one grant more access upon request
• D. Assign individual users access to each folder

Answer: (A)

Grouping access is the most scalable and secure way to manage folder permissions. By assigning permissions to groups that reflect roles (for example, contract managers, legal reviewers, finance approvers), you grant the same level of access to everyone in that group and control it in one place. When someone changes roles or leaves the organization, you adjust group membership rather than editing permissions for many individuals, which keeps access consistent across all folders and simplifies audits. This approach also supports the principle of least privilege, since you can tailor which groups exist and which folders they can access, rather than giving broad access to individuals or trying to grant access on a case-by-case basis. Per-user or per-folder maintenance becomes tedious and error-prone as the environment grows, and cases where everyone gets broad access conflict with security best practices.