Foldr Zen Zone

Knowledge Base

Location Based Access Permissions

Controlling access by location

Foldr v4  provides the administrator the ability to control where users are able sign into Foldr and what resources are available from that location.  The administrator can permit or deny users or Active Directory groups based on the client IP address, IP address ranges or entire subnets.  This could be useful if a group is only to be allowed access from inside the organisations network, or to limit the locations that a user is permitted to sign in from remotely.

From Foldr Settings >  Security the administrator can specify permissions for ‘Use Foldr‘ and ‘Connect with WebDAV‘ in conjunction with the field labelled ‘Only apply to these IP addresses/networks’.  Networks should be configured one per line if multiple entries are required.

Accepted values are:

  • Wildcard format: 1.2.3.*
  • CIDR format: OR
  • Start-End IP format:

In the example below, the built-in Foldr Users (Everyone) is being configured with an allow rule for subnet – This rule will result in all users ONLY being permitted to sign in from a client device on the subnet.  (client IP address of –

In the second example, the built-in Foldr Users group is denied access from the same subnet.  The result of this ACL rule would allow users to sign in from any location except subnet

In the final example, the Active Directory group ‘Marketing’ is only allowed to sign in from client devices on the network  Users in this group will be denied access if they attempt to sign in from any other location.


Location based share permissions

As well as being able to control where users / groups can sign in from, the administrator can control where users can access certain storage locations through Foldr. i.e. you can apply share perimssions based on location / network address.

Using the granular share access permissions, this gives the administrator the ability to only present a share if the client is signing in from a particular IP address or subnet, or you can force shares to only be read only / writable from specific locations.  Share permissions are configured within Foldr Settings > Shares & Storage > edit-share > Access tab > Permissions.

In the example below, the permissions on the share below have been modified to only allow the storage location to be visible in the Foldr web or client apps if the client is connecting from either the or networks.

Location based client app configuration

Within Foldr Settings > Devices & Clients, the administrator has the ability to also configure granular access permissions for each client app individually  – Windows, macOS, iOS, Android and web.

In the example below, a policy has been configured to only allow users within the Marketing group permission to use the iOS app from networks and

Every journey begins with a single step

There can be many paths to a desired document. Let Foldr be your guide, wherever the destination...

Find File Zen