Difference between Base and Flex permissions for Storage@Yale
Base Model Share Permissions
- Base shares are created with a Read Only (RO) and Read Write (RW) permission group. Users are placed in one of these groups to grant them access.
- The permissions are passed throughout the share and cannot be changed within the share.
- If you have sensitive/secure data, you must use Base permissions.
Flex Model Share Permissions
- Flex shares are created with a ReadOnly (RO) and ReadWrite (RW) permission group as well as a Full-access group.
- Users are placed in one of these groups to grant them access. The permissions are passed throughout the share by default.
- The share owner is placed in the full access group and can modify permissions for files/directories inside the share as desired.
- Sensitive/secure data cannot be stored on a Flex model share, you must use a Base permission model.
- Before choosing Flex model share you should make sure you have someone comfortable with managing Windows Access Control Lists and have a Windows workstation available to manage the share permissions.