Folder Detail View

How to interpret the permission matrix in NTFS analysis: inheritance, shares, and explicit rights at a glance.

Introduction

The detail view is the core of NTFS analysis in Docusnap365. As soon as a folder is selected in the left navigation tree, a structured permission matrix opens on the right side, displaying all assigned access rights in detail.

Accessing the Detail View

  1. Open an analysis: Navigate to an existing analysis task under Analysis > NTFS Analysis.
  2. Select a share: In the left tree, open a share and select a specific folder.
  3. Matrix display: The matrix on the right side automatically shows all permissions assigned to this folder.

Color Coding in the Navigation Tree

Folders in the navigation tree are color-coded depending on their permission situation. This helps you identify special cases even before opening a folder:

ColorMeaning
GrayDefault display – no special cases (inheritance active, no direct rights)
BlueThis folder has explicitly assigned rights
RedInheritance is disabled – this folder does not inherit any rights

This color scheme helps to quickly identify folders with potentially exceptional permission scenarios.

Overview of the Permission Matrix

The matrix is divided into three main areas:

AreaDescription
Share PermissionsPermissions granted at the share level (\\Server\Share).
Inherited PermissionsPermissions inherited from parent folders.
Explicit PermissionsPermissions defined directly on this folder.

Display by Type

Each row in the matrix shows a principal (e.g., DOMAIN\User) with the assigned permissions. These are further divided into:

  • Basic permissions (e.g., Read, Modify, Full Control)
  • Advanced permissions (e.g., Delete, Write Attributes)
  • Inheritance context (e.g., “This folder only,” “This and subfolders”)

Meaning of the Symbols

The matrix uses color-coded indicators to display permissions:

SymbolMeaning
Green checkThe right is actively granted and applies to the current folder or selected path
Red checkThe right is explicitly denied – denied rights take precedence
🟠 Orange checkThe right applies only to subfolders, not to the currently selected folder itself

Note: The orange check typically appears when inheritance is set to “Subfolders only”, for example.

This presentation helps identify partially inherited rights in a differentiated way — especially in nested folder structures or with selective inheritance.

Why This View Is So Important

This structured visualization allows administrators to immediately see:

  • Which rights are effectively in effect
  • Whether there are exceptions or deviations from the standard
  • Whether rights are inherited or explicitly set
  • How share permissions interact with NTFS permissions

Basis for Effective Permission Analysis

The displayed information serves as the foundation for calculating effective permissions in the next step. Only when share, inheritance, and explicit permissions are correctly resolved can a valid overall view of a user’s or group’s access situation be obtained.

Folder details