My client has Sharepoint 2019 on prem. They want to classify their files in their EDRMS and grant access based on the type of classification. For example, all files are located in one library but classified. One group must be able to see all documents, including confidential documents, but the other group should only be able to see Public documents (no confidential documents). I know I can manipulate it with views and target audience, but that is not truly a good way to restrict access on files. How can this be achieved?

  • 1
    Can't you use Workflow to set document level permission when documents are being uploaded/created? In SPO, using MS Flow I'm doing the same thing, stop inheriting permission from the parent and than grant access to a particular user based on the meta data Oct 20, 2020 at 13:59
  • Yes I can do that, but I thought there might be a way that you can configure access rights based on content types.
    – Heste
    Oct 22, 2020 at 7:19

1 Answer 1


You could put different files in different folders and set unique permissions for the folders.



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.