Not every folder in a SharePoint document library should be open to everyone. HR records, financial reports, and confidential project files often sit alongside documents used by the wider team. In the SharePoint environments we review at SPDW, this is where access problems usually begin: businesses create extra sites, move files unnecessarily, or leave sensitive folders open because the existing permission structure is unclear.
In many cases, you can restrict folder access in SharePoint without moving files or creating a separate site. You can keep the content in the same document library and limit access only to the folder that needs it. This protects sensitive information without making the rest of the library harder for your team to use.
In this article, you’ll learn how to configure folder permissions, stop inherited access, assign permissions to the right users, and avoid common mistakes that can expose sensitive information or create unnecessary access issues.
Understand How Folder Permissions Work
Before changing any settings, it’s important to understand how SharePoint folder permissions work.
By default, every folder inside a document library inherits its permissions from the parent library. This is known as permission inheritance. It keeps administration simple because every folder follows the same access rules.
However, inherited permissions aren’t suitable when one folder contains confidential information that only a few people should access. In that case, you’ll need to stop inheritance so the folder can have its own permission settings.
Once the folder has unique permissions, any changes you make apply only to that folder. The rest of the library continues using its existing permissions, so there’s no impact on other teams or documents.
Understanding this concept first makes the remaining steps much easier.
Step 1: Open the Folder You Want to Secure
Sign in to Microsoft 365 and open your SharePoint Online site. From there, navigate to the document library that contains the folder you want to protect.
Select the folder, then open its details or context menu and choose the option to manage permissions.
Before making any changes, take a moment to review the users and groups that currently have access. Since the folder is still inheriting permissions from the library, you’ll usually see the same people who already have access to the rest of the documents.
Reviewing the existing permissions helps you decide who should keep access and who no longer needs it.
Step 2: Stop Permission Inheritance
This is the most important step in the entire process.
As long as the folder inherits permissions from the parent library, you can’t create separate access rules for that folder. Any permission changes will continue to follow the library’s settings.
To avoid that, choose the option to break permission inheritance in SharePoint.
Don’t worry if you still see the same users after doing this. Breaking inheritance doesn’t immediately remove anyone’s access. Instead, it creates a separate copy of the existing permissions, giving you full control over that folder.
From this point onward, you can update permissions without affecting the rest of the library. This is exactly how to set SharePoint folder permissions while keeping other folders unchanged.
Step 3: Remove Access That Is No Longer Needed
Now that the folder has its own permissions, review the list of users and SharePoint groups that currently have access.
Ask yourself a simple question: does each person really need to open this folder?
If the answer is no, remove their access. Since you’re now working with folder-specific permissions, these changes won’t affect the parent library or any other folders.
Be careful not to remove the site owner or every administrator from the folder. At least one administrator should always retain permission to manage access in the future.
Cleaning up unnecessary access also strengthens your overall SharePoint security. Employees change departments, contractors leave projects, and temporary permissions are often forgotten. Reviewing access at this stage helps ensure that only the right people can see sensitive documents.
Step 4: Give Access Only to the Right People
With the folder now using its own permissions, the next step is to decide who should be able to access it.
Select Grant access, enter the names of the required users or groups, and choose the appropriate permission level. If someone only needs to review documents, assign Read access. If they’re responsible for updating files, grant edit permission instead.
This is the most effective way to provide SharePoint folder access for specific users without changing permissions for the entire library.
If several people need the same level of access, assign permissions to a SharePoint group instead of adding users individually. For example, you might have separate groups for HR, Finance, or project managers. Whenever someone joins or leaves a team, you only need to update the group membership instead of editing permissions on every folder.
That approach saves time, keeps permissions consistent, and makes future administration much easier.
Step 5: Verify Your Changes
Before considering the task complete, make sure the permissions work as expected.
Open the folder’s permission settings one more time and review the users and groups that have access. Then, if possible, test the folder with another account. A user with permission should be able to open the folder normally, while someone who wasn’t granted access should receive an access denied message.
This simple check confirms that your SharePoint access control for folders is working correctly. It also helps you catch configuration mistakes before they affect your team.
Common SharePoint Permission Mistakes to Avoid
Most SharePoint permission problems start with small changes that become difficult to manage over time.
When reviewing SharePoint setups for our clients, we often find the same person being given access in more than one way. They may be added directly to a folder and also through a SharePoint group. This makes permissions harder to review and increases the chance of outdated access being left in place.
Another common mistake is changing folder permissions before stopping inheritance. If inheritance is still active, the folder will continue using the document library’s existing permissions.
It’s also worth avoiding individual permissions wherever possible. As your SharePoint environment grows, managing dozens of users one by one becomes difficult. Using groups instead keeps permission management organized and easier to maintain.
Finally, don’t create unique permissions for every folder unless there’s a genuine business need. Too many exceptions can make troubleshooting more complicated and increase administrative overhead.
Best Practices for Long-Term Permission Management
Setting permissions correctly is only the first step. Keeping them accurate over time is just as important.
Review access to sensitive folders regularly, especially after team changes or completed projects. People who needed access six months ago may no longer require it today.
Whenever possible, manage permissions through groups rather than individual accounts. This supports consistent access control and reduces the chance of missing someone when roles change.
If a folder contains confidential information, document why it uses its own permissions. This gives future administrators the context they need before making changes.
You should also include permission reviews as part of your regular Microsoft 365 security checks. A quick audit every few months can identify outdated access and help maintain secure document sharing across your organization.
Need a Clearer Way to Manage SharePoint Permissions?
SharePoint permission issues rarely appear all at once. The real problems usually build up over time as users are added directly, groups overlap, folders stop inheriting access, and old sharing links remain active. Once that happens, even a simple access request can take longer than it should because no one is completely sure where that access comes from.
If your SharePoint environment has reached that point, SPDW can help you review the existing setup, remove unnecessary access, and rebuild permissions around clear groups and ownership. The goal is not to add more controls, but to create a structure your team can understand, manage, and review without having to investigate every folder individually.
Conclusion
Knowing how to restrict access to a SharePoint folder helps you protect sensitive information without making collaboration more difficult. Instead of creating separate sites or moving files into different libraries, you can control access at the folder level and give permissions only to the people who need them.
The process comes down to a few key steps: stop permission inheritance, remove unnecessary access, assign the right permission levels, and verify the results before users start working with the folder. Once you understand these steps, it becomes much easier to manage SharePoint Online securely while keeping everyday collaboration simple.
Finally, remember that permissions shouldn’t be a one-time task. Regular reviews help ensure your folder settings continue to reflect your team’s current responsibilities, making your SharePoint environment easier to manage and more secure over time.
If you’re looking to improve the way your organization manages SharePoint, having the right guidance can make all the difference. At SPDW, our SharePoint Consulting team helps you simplify permission management, strengthen security, and build Microsoft 365 solutions that support the way your teams work every day. Get in touch with us to discuss your SharePoint requirements.
FAQs
1. Can I make a folder private or lock it in SharePoint?
SharePoint doesn’t have a literal “private” or “lock” setting for folders. To achieve the same result, break permission inheritance for the folder and assign unique permissions so only specific users or groups can access it, while the rest of the library stays accessible to everyone else.
2. How do I restrict access to a SharePoint folder?
To restrict access to a folder, open its permission settings, break inheritance from the parent library, then remove any users or groups who shouldn’t have access and grant permissions only to the people who need it. This gives the folder its own independent access rules without affecting the rest of the document library.
3. How do I limit access to a specific subfolder in SharePoint?
If you only need to restrict a subfolder rather than its parent folder, apply unique permissions directly to that subfolder instead of the folder above it. This keeps the parent folder’s existing permissions unchanged while giving the subfolder its own separate access rules.
4. Does restricting access to a SharePoint folder affect its subfolders?
Yes. By default, subfolders and files inherit the permissions of their parent folder. If you assign unique permissions to a folder, those permissions will usually apply to everything inside it unless you configure different permissions for a specific subfolder or file.
5. Can I restrict access to a folder without creating a new SharePoint site?
Yes. You can assign unique permissions to a specific folder without creating a separate SharePoint site. This allows you to protect sensitive content while keeping the rest of the document library accessible to other users.
6. What’s the difference between folder permissions and site permissions in SharePoint?
Site permissions control access to the entire SharePoint site and its content. Folder permissions apply only to a specific folder within a document library, making them a better choice when you need to secure certain files without affecting access to the rest of the site.
7. Can I restrict access to a single file instead of an entire folder in SharePoint?
Yes. SharePoint lets you assign unique permissions to individual files as well as folders. This is useful when only one document contains sensitive information and the rest of the folder should remain accessible to other users.
8. Can I use SharePoint groups instead of assigning permissions to individual users?
Yes. Using SharePoint groups is the recommended approach for managing folder permissions. Instead of assigning access to each user individually, you can grant permissions to a group and manage membership from one place. This makes permission management easier, improves consistency, and reduces the chances of configuration errors as your team grows.
9. Can I restore permission inheritance?
Yes. You can restore permission inheritance at any time by deleting the folder’s unique permissions. The folder will then use the same permissions as its parent document library again. Any custom access previously assigned to that folder will be removed.
10. How do I check who currently has access to a SharePoint folder?
Select the folder, open the details panel, and choose Manage access. SharePoint will show the users, groups, and sharing links that currently provide access. For a more detailed view, open Advanced permissions settings to see whether access is inherited or assigned directly.
