SMB File Share On Storage Gateway With Windows Permission

Hi, to only have admin users full control access to root of the share and other users only access to their respective subfolders under root, you would be able to add admin users/groups with full control access on to the root of the file share and set apply to this folder, subfolders and files. After this, you would need to remove Everyone on root.

Next, you can add the respective users/groups with read-only access on the root and set apply to This folder only. Then, using admin users apply read/write or full control permissions for the subfolders for the respective users.

This way admin users can only create subfolders under root and respective users would be able to list/traverse the folders under root but access only their respective subfolders.

Since root ACLs aren't persisted to S3, when you delete the gateway/share, you would lose them upon recreating the share using the same bucket. I would suggest saving a copy of the root ACLs to re-apply in such scenarios.

You can give Everyone read only access on the root directory. And provide full access to the respective sub folder to Everyone user.