# Shared Folders

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FLHpem3d5RFcSQ0TzjgT4%2Fconsumer-enduser-guide-header.jpeg?alt=media&#x26;token=223f6d74-1935-4be3-bf42-1690e1a61c5c" alt=""><figcaption></figcaption></figure>

## Overview

Keeper's Private Folder, Shared Folder and Subfolder capabilities are flexible and secure. Private Folders and Shared Folders can be created within the vault (if permitted by the Admin). Users and [Teams](https://docs.keeper.io/en/enterprise-guide/teams) may be provisioned automatically from SCIM-connected identity providers such as Azure, Okta and Google Workspace allowing for simple setup of shared folder permissions. Teams can also be provisioned from Active Directory through the [Keeper Bridge](https://docs.keeper.io/keeper-bridge/), or using Keeper's APIs.

## Private Folder

A private folder is only visible to the user who created the folder and can be made up of subfolders and records. A folder can also contain other shared folders and shared records. To create a private folder, click **Create New > Folder**. Choose where you would like to nest the folder using the dropdown menu. You can select the parent folder or select **My Vault** to add the folder at the root level.&#x20;

![Private Folder](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FiMzgUHUzxUPU0LKSNFb3%2F1SF%20Full%20screen.png?alt=media\&token=1ab52146-94e3-447a-9fd1-c4a791dfd5c1)

## Shared Folder

A shared folder can be shared with an individual Keeper user or with a Team of users (as designated in the Admin Console). Shared Folder permissions can be applied to Users, Teams and Records.

To create a Shared Folder, click **Create New > Shared Folder**. Choose where you would like to nest the folder using the dropdown menu. You can select the parent folder or select **My Vault** to add the folder at the root level. Next enter the name of the folder and set the User and Folder Permissions.&#x20;

![Create New > Shared Folder](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FRrJtlldGAsyjHNVJ8wvi%2F2SF%20Create%20New.png?alt=media\&token=11e04af7-0902-43c6-a82f-9ee01664b219)

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2Ft38AcZDNHc82dZE0Xaec%2F3SF%20Creation.png?alt=media&#x26;token=062adeea-52b4-42f3-8296-d6bda554569d" alt=""><figcaption><p>New Shared Folder Creation</p></figcaption></figure>

A Team can be setup in the Admin Console manually from **Admin** **Panel** and the **Teams tab** by clicking on the **Add Team** button and then selecting users via the **+** user checkbox dialogue.

Alternatively, when a user is provisioned to a Team through any of the previously described onboarding methods (Active Directory Bridge, SSO, Azure AD, SCIM, API, etc...), the user will instantly receive the shared folders for that team, and the records associated with those shared folders. When the user is removed from a team, their access is revoked from any shared folders and those folders are immediately removed from their vault.&#x20;

{% hint style="info" %}
Any user within the Keeper Vault can create a private folder or shared folder (unless restricted by their Keeper Administrator).
{% endhint %}

### Add Records & Set Record Permissions

You can add records to the folder by a simple drag-and-drop or you can click **Edit** and add the records using the record search bar.&#x20;

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FeQZ7IwH2BE7nOji1zkh1%2F4SF%20Drag%20Drop.png?alt=media&#x26;token=10a2f784-bec6-4fe0-ad91-4b573a8a63c6" alt=""><figcaption><p>Add Records to a Folder via Drag-and-Drop</p></figcaption></figure>

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FQOQbdb361jpjBfVw0mkB%2FScreenshot%202025-08-27%20at%2010.05.09%E2%80%AFPM.png?alt=media&#x26;token=4f6183e7-210f-49ca-82a0-984ed647f6e1" alt=""><figcaption></figcaption></figure>

Record Permissions are used to govern folder members' (users) interactions with each individual *record* in the folder. You can access these permissions from the **Records Tab** by clicking **Edit** and then the **dropdown icon** next to each record name.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FLZxE5nQYesgaeWw3Ji8P%2FScreenshot%202025-08-27%20at%2010.05.31%E2%80%AFPM.png?alt=media&#x26;token=be094f0f-dc22-40da-8b12-b869c5fbdb57" alt=""><figcaption><p>Record Permissions in a Shared Folder</p></figcaption></figure>

| Permission       | Description                                        |
| ---------------- | -------------------------------------------------- |
| Can Edit         | Users in the folder can edit this record           |
| Can Share        | Users in the folder can share this record          |
| Can Edit & Share | Users in the folder can edit and share this record |
| View Only        | Users in the folder can only view this record      |

### Add Users & Set User Permissions

While in **Edit** mode, from the "Users" tab, click within the email address field and enter the email address of the Keeper user (including [Share Admins](https://docs.keeper.io/enterprise-guide/share-admin)) or Team you would like to share the folder with.&#x20;

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2F8uHcwTF1sdFdbEKWqfiL%2FScreenshot%202025-08-27%20at%2010.06.22%E2%80%AFPM.png?alt=media&#x26;token=e4c1d2cc-2d3b-4dbd-8467-fbbb8aee7c75" alt=""><figcaption></figcaption></figure>

Next, set the user permissions by clicking on the **dropdown arrow** next to each user's email.&#x20;

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FVB2dZ9zuW5oCoXFCyQpR%2FScreenshot%202025-08-27%20at%2010.06.40%E2%80%AFPM.png?alt=media&#x26;token=e012855a-2cbe-41e1-902a-3ca029de438e" alt=""><figcaption><p>Shared Folder User and Team Permissions</p></figcaption></figure>

Sharing can automatically expire after a set amount of time, or on a specified date.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2F52PuiQlIxiJxtEJ6MK6u%2FScreenshot%202025-08-27%20at%2010.07.27%E2%80%AFPM.png?alt=media&#x26;token=15713e27-cc74-4a4a-bf46-498a9d40190e" alt=""><figcaption><p>Time-Limited Folder Access</p></figcaption></figure>

| Permission                 | Description                                                                       |
| -------------------------- | --------------------------------------------------------------------------------- |
| Can Manage Users           | The user can add or remove other users in the folder                              |
| Can Manage Records         | The user can add or remove records in the folder                                  |
| Can Manage Users & Records | The user can add or remove other users and records in the folder                  |
| No User Permissions        | The user will have no permissions over the other users or records in the folder   |
| Expiration                 | Assign time-limited access to a user or team. Access is revoked after expiration. |

### Advanced Permission Controls

In the Keeper Admin Console, role-based enforcement policies control the ability of users to use sharing capabilities. To modify sharing and creation permissions, visit the **Admin Console** > **Roles** > **Enforcement Policies** > **Creating and Sharing** for the specified role.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FcVgrXgmdpBSlPdjQ3cK2%2FScreenshot%202025-08-27%20at%2010.09.11%E2%80%AFPM.png?alt=media&#x26;token=c8d90d47-476f-4aeb-bd4a-2ef1beeaace1" alt=""><figcaption><p>Creating and Sharing Policies</p></figcaption></figure>

<table><thead><tr><th>Permission</th><th data-hidden>Description</th></tr></thead><tbody><tr><td>Can create records</td><td></td></tr><tr><td>Can create records in side shared folder only</td><td></td></tr><tr><td>Can duplicate records</td><td></td></tr><tr><td>Can create folders</td><td></td></tr><tr><td>Can create folders inside shared folders only</td><td></td></tr><tr><td>Can create shared folders</td><td></td></tr><tr><td>Can create items in the identity and payments tab</td><td></td></tr><tr><td>Can upload files</td><td></td></tr><tr><td>Can create two-factor codes</td><td></td></tr><tr><td>Can share and receive items</td><td></td></tr><tr><td>Can share to others by adding records inside shared folders only</td><td></td></tr><tr><td>Can only receive shared items</td><td></td></tr><tr><td>Cannot share or receive items</td><td></td></tr><tr><td>Can generate One-Time Share links</td><td></td></tr><tr><td>Can create self-destructing records</td><td></td></tr><tr><td>Can create links with editable fields and file upload capabilities</td><td></td></tr><tr><td>Can share records with file attachments</td><td></td></tr><tr><td>Can share outside of isolated nodes</td><td></td></tr><tr><td>Can share to users outside the enterprise</td><td></td></tr><tr><td>Can receive items from users outside the enterprise</td><td></td></tr></tbody></table>

### Subfolders

To create a Subfolder within a Shared Folder, right-click on a **Shared Folder** and select **New Folder**. You can add records to the folder by a simple drag-and-drop or you can click **Edit** and add the records using the record search bar.&#x20;

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FBKufWDPtys3YIrvWrVQx%2F11SF%20Subfolder.png?alt=media&#x26;token=71e7b2eb-0e73-4793-9df7-fc99afbeded1" alt=""><figcaption><p>Right-Click Menu</p></figcaption></figure>

While viewing the records within a Shared Folder, click the **Edit Icon** and check the box next to “Show subfolder records" located in the Records tab to include those records in view or leave it unchecked to collapse them from view.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FSQgSXF83yvsmbGrQCjcn%2F12SF%20Subfolder%20view.png?alt=media&#x26;token=6e2ef508-e418-44fc-a60e-7d8d1a85de4d" alt=""><figcaption><p>Show Subfolder Records</p></figcaption></figure>

Both private and shared folders can be nested and contain an unlimited number of records or subfolders. **Each subfolder inherits the same permissions structure as the parent folder**.

If the parent folder is a shared folder and you move a private folder into it, the private folder will now inherit the permissions set from the shared folder, including the users that have permission to view and edit that folder and its records.

In the screen capture below, KeeperPAM Demo folder and subfolders are not shared, but the KeeperPAM Accounts in US-WEST-1 (California) are shared.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FV4H89PCe0PjZfkhAN6B0%2FScreenshot%202025-08-27%20at%2010.24.16%E2%80%AFPM.png?alt=media&#x26;token=5aef8495-1aad-40b2-9ac9-4c333bb20dd5" alt=""><figcaption><p>Private and Shared Folder Structure</p></figcaption></figure>

### Applications

For customers using Keeper Secrets Manager or KeeperPAM, a Shared Folder can also be assigned to a Secrets Manager Application. An Application can represent a CI/CD platform such as Github or Gitlab, or it can be used with the Keeper Gateway or Keeper Connection Manager for establishing privileged sessions. To learn more about KeeperPAM, visit the [PAM documentation](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/).

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FwY2OGPK6v2WnWiwhR1yf%2FScreenshot%202025-08-27%20at%2010.08.01%E2%80%AFPM.png?alt=media&#x26;token=2d8396b8-bbf4-486a-b125-17e4de75fcb3" alt=""><figcaption><p>KeeperPAM Applications assigned to a Shared Folder</p></figcaption></figure>

### Default Shared Folder Settings

Default Shared Folder Settings are configured in order to easily set folder permissions for all users and records within the folder and subfolder(s). These are selected upon the initial creation of the Shared Folder but you can change them at any time by clicking the **edit icon** in the upper right corner of the shared folder.

Please note, newly created records inherit these permissions when adding users or records to the shared folder.&#x20;

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FFSe2UYTrFzs1rxKD5gbs%2Fimage1.avif?alt=media&#x26;token=40dc1546-03fd-44b1-8875-33df43208931" alt=""><figcaption><p>Edit Shared Folder</p></figcaption></figure>

If you would also like to apply the permissions change to your subfolder records, you must first check the box next to "Show subfolder records" located within the "Records" tab.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FLCrfn3VTdiMIHxMVKam5%2Fimage2.webp?alt=media&#x26;token=55fe59b3-8557-4916-adb5-5c69568b5522" alt=""><figcaption><p>"Show Subfolder Records" Configuration</p></figcaption></figure>

Next, select the "Settings" tab and click each dropdown arrow to set your default "User" and "Record" permissions for the folder.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FEpcuVKrdmKhgsafkP7Lx%2Fimage3.webp?alt=media&#x26;token=26bc92b6-158c-416e-bd09-21334190cf32" alt=""><figcaption><p>Shared Folder Settings</p></figcaption></figure>

Optionally, check the box next to "Apply permissions to existing \[x] records" to apply the changes to any existing folder records. You can also check the box next "Apply permissions to all subfolders (\[x] records)".

{% hint style="warning" %}
If the default folder settings are not set properly, users who add records to the Shared Folder will find that the records are "View Only" by other members of the Shared Folder, even if those users have "Can Manage Records" permission. If you would like all folder members to have edit rights over all records that are added to the folder, set the **Record Permissions** setting to **"Can Edit"**

The "Can Manage Record&#x73;**"** User Permissions setting only allows users the ability to add or remove records, it does NOT give them record permissions.
{% endhint %}

Once the default folder settings are configured, it will only affect users added after the change was made. To edit permissions for the users added prior to the default settings change, edit them individually or through a bulk change from the "Users" tab.

A bulk change can be achieved by checking the box next to "Name" and clicking the "Permissions" dropdown to make your selection.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FybssTQiCVO6fEmWP3F96%2Fimage5.webp?alt=media&#x26;token=b6faa442-aa7e-4853-b4a3-19584f4b594a" alt=""><figcaption><p>Bulk Permissions Change to Shared Folders Users</p></figcaption></figure>

## Notes for Managing Folders and Subfolders

A Folder and a Shared Folder are objects that are created independently of records. Keeper's implementation of Subfolders (Nested Folders) is powerful and flexible, providing Enterprise customers with the most secure encryption model while providing ease-of-use functionality such as drag-and-drop.

* A folder can be made up of private records, shared records or other regular subfolders.
* Subfolders can be either shared or private.
* You can create an unlimited number of folders and shared folders.
* A shared folder can be made up of an unlimited number of subfolders, each subfolder beneath a shared folder retains the permissions of the parent.
* There is no limit to the folder tree depth.
* A folder is a container of records and record references (shortcuts).
* A shared folder is a container of records, with flexible user and team sharing capability.
* Folders and subfolders contained within Shared Folders will inherit the permission of the Shared Folder.
* Shared folders within other shared folders are currently not supported, however this capability is under development and will be launched soon.

Watch the video below to learn about creating shared folders and assigning permissions.

{% embed url="<https://vimeo.com/585571156>" %}
Create Shared Folders and Assign Permissions
{% endembed %}

## Bulk Record Permission Changes with Commander

Keeper Commander, our command-line SDK toolkit, provides a method of bulk record permission changes. Commander has special features that can be executed on the CLI instead of using the user interface. \
\
To download Keeper Commander binaries on Mac or PC please visit:

<https://github.com/Keeper-Security/Commander/releases>\
\
Or, to install the CLI in a developer mode, please follow the installation instructions in the documentation here:

<https://github.com/Keeper-Security/Commander>

**Example: Elevate Permissions on All Records**

In this example, we will recursively change the record permissions in a Shared Folder.

(1) Identify the Shared Folder UID on the Vault user interface, or from the Commander CLI.

On Commander, you can use the "ls -l" command, similar to a Bash shell.

![Finding the Shared Folder UID](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LO5CAzpxoaEquZJBpYz%2F-MbJg468zekDb7DxfM3V%2F-MbJiZ1Ns46eOHGR7o54%2FScreen%20Shot%202021-06-03%20at%206.53.34%20PM.png?alt=media\&token=94e16cb7-cf1d-458c-a74a-1cc49beb59f9)

On the Vault user interface, you can click on the info icon to display the Shared Folder UID.

![Shared Folder UID](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FiV7b2deJzE6qn2c5otJb%2F15SF%20Record%20UID.png?alt=media\&token=f4ad6ec1-0553-4f60-97e9-781f6685ac86)

(2) On Commander, execute the "record-permission" command with the "--dry-run" option to simulate the command.  In this example, the Shared Folder UID is "-FHdesR\_GSERHUwBg4vTXw".  The command is below:

{% code overflow="wrap" %}

```
record-permission --dry-run --recursive --action grant --can-edit -- -FHdesR_GSERHUwBg4vTXw
```

{% endcode %}

![](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LO5CAzpxoaEquZJBpYz%2F-MbJg468zekDb7DxfM3V%2F-MbJkglvbtTFfow3deS5%2FScreen%20Shot%202021-06-03%20at%207.03.21%20PM.png?alt=media\&token=0830f29a-6ba3-406b-933e-9cedc867fe3a)

As you can see, the Shared Folder UID starts with a dash so we add "--" before the identifier to escape the character.

Running this command produces the following output:

![](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LO5CAzpxoaEquZJBpYz%2F-MbJg468zekDb7DxfM3V%2F-MbJlBM95YRyNSVgROHz%2FScreen%20Shot%202021-06-03%20at%207.02.43%20PM.png?alt=media\&token=bb20a26d-2c94-4250-8d82-31c883acbc1a)

The "SKIP" section is saying that the current user on Commander cannot make those requested changes, because we are not the owner of the record.  The "GRANT" section indicates the changes that will be allowed.

(3) To execute the command, we remove the "--dry-run" portion:

![](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LO5CAzpxoaEquZJBpYz%2F-MbJg468zekDb7DxfM3V%2F-MbJliE4oKyvb9aqay_O%2FScreen%20Shot%202021-06-03%20at%207.07.37%20PM.png?alt=media\&token=ca7379f1-2c53-474f-b537-65af640da9c4)

Now, on the Vault UI, the permission of those affected records has been changed to "Can Edit".

![Permissions Updated](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FB64ANWHXbr5OaRNXnUCs%2F16SF%20Can%20Edit%20Commander.png?alt=media\&token=59979aa5-6de7-49e1-877e-d51dc3bacb4a)

If you are in a situation with many record owners in the same shared folder that require update, each of those users can simply run the above Commander action to change the permissions of their respective records.

## Share Admin

Keeper's **Share Admin** feature is a role-based permission that gives administrators elevated access rights over your organization's shared folders and shared records.

[**Learn more about Share Admin**](https://docs.keeper.io/en/enterprise-guide/sharing/share-admin)

## Moving Records

A record can exist outside of a folder, inside a folder or inside a Shared Folder. A record can also be linked into multiple folders or Shared Folders. A linked record is also referred to as a **Shortcut**. In either case, modifying a linked record will change it everywhere it has a shortcut.

There are two ways to move a record into a folder:

* Drag-and-drop the record from the list of records and select **Move** when prompted
* Right-click on a record and select **Move To...**

![](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FzwGKfkRJ63jzLkWzFVWs%2F17SF%20Moving%20Records.png?alt=media\&token=3cc41e83-1973-4e98-b26e-10f585d54414)

Watch the video below to learn about adding records to shared folders.

{% embed url="<https://vimeo.com/585563657>" %}
Add Records to Shared Folders
{% endembed %}

## Creating Record Shortcuts

Use one of the following methods to to add a record to multiple folders (create a Shortcut):

* Select the **Folder** and then select **Edit**. In the **Add Records** search box, search for the records to add and select **Add**. This method will always add a Shortcut to the folder.
* Drag-and-Drop the record from list of records and select **Create Shortcut** when prompted
* Right-click on a record from the list of records and select **Create Shortcut**...

## Teams in Shared Folders

Teams are created by the Keeper Administrator, or any user who has been given administrative permissions for a specific node or organizational unit. A team is made up of users within a node or sub-node. Additionally, there is no limit to the number of teams that can be created. Teams can be provisioned using any of the following methods:

* Manual creation in the Keeper Admin Console
* Automatically provisioned through the Active Directory / LDAP Bridge software
* Automatically provisioned through SCIM
* Automatically provisioned through the Keeper Commander SDK

At the encryption layer, Teams have a public and private key pair. In order to add a user to a team, you must first be a member of the team because you need to encrypt the Team Key with the recipient's public key. When the recipient logs into their vault, the Team Key is retrieved by decrypting it with the user's private key. This encryption process is automatically handled by the provisioning methods listed above.&#x20;

#### Team Level Restrictions

Inside the Admin Console there are several team security options.  Teams that are added to a shared folder can be given limited rights:

* Disable record re-shares
* Disable record edits
* Apply privacy screen

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FQgsgj2E6xqSacxIUcTgz%2Fimage.png?alt=media&#x26;token=af9c12f5-1072-4a41-868e-c748f62f1253" alt=""><figcaption><p>Team Level Restrictions</p></figcaption></figure>

## Deleting & Leaving Shared Folders

A user with access to a Shared Folder has the option to remove themselves from the Shared Folder. If the user has been granted the **Can Manage Users & Records** permission, the user also has the ability to delete the Shared Folder.

![Leave Shared Folder vs. Delete Shared Folder](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2F3njiNIm2QfwU0AbCvMkG%2F20SF%20Leave%20Shared%20Folder.png?alt=media\&token=5a5b3dda-94b1-48ed-a151-b39dd9937a69)

{% hint style="info" %}
When a Shared Folder is Deleted, the records stored in the shared folder will be moved to the "Deleted Items" section of the vault, for the owner of each record.  &#x20;
{% endhint %}

## Changing Colors of Folders

Users can change the color of a shared folder in order to make is stand out visually. This can be done on both Shared Folders and Private Folders.

![Options > Change Color](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FVycBz4JloAdCcJVVxKWe%2F18SF%20Change%20Color%20Option.png?alt=media\&token=706d6b5d-5fcb-44b0-90b9-f72b33267ff1)

![Choose a Folder Color](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FebIsDaiRzA9VySnJXjwH%2F19SF%20Change%20Color.png?alt=media\&token=f49d3403-6d7d-4775-b35e-04a230ba86c2)

## Administrative Controls

The use of shared folders can be restricted by the Keeper Administrator in the [Roles](https://docs.keeper.io/en/enterprise-guide/roles) section of the Keeper Admin Console.

### Commander CLI

Folder sharing commands are available from the [Keeper Commander](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/overview) CLI tool. This provides advanced users with the ability to script and automate any sharing actions.

For more info, see: [Commander Sharing Commands](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/sharing-commands)

* [`share-folder`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/sharing-commands#share-folder-command)
* [`tree`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#tree-command)
* [`transform-folder`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#transform-folder-command)
* [`rndir`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#rndir-command)
* [`rmdir`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#rmdir-command)
* [`record-add`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#record-add-and-record-update-commands)
* [`mv`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#mv-command)
* [`mkdir`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#mkdir-command)
* [`ls`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#ls-command)
* [`list-sf`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#list-sf-command)
* [`download-membership`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/import-and-export-commands#download-membership-command)
* [`cd`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/record-commands#cd-command)
* [`apply-membership`](https://app.gitbook.com/s/-MJXOXEifAmpyvNVL1to/commander-cli/command-reference/import-and-export-commands#apply-membership-command)
