What is the recommended approach to folder security permissions in CLM?

• A. Assign access using Groups.
• B. Assign access by individual users only.
• C. Deny access by default and never grant.
• D. Grant access to all users by default.

Answer: (A)

Using Groups to assign folder permissions is the scalable, maintainable way to control access in CLM. By tying access to security groups that represent teams or roles, you grant rights to the group once and automatically propagate them to all current members. This keeps permissions consistent across folders, simplifies onboarding and offboarding, and makes it easy to adjust access when someone changes roles—no need to edit permissions for each individual user.

This approach also supports the principle of least privilege, since you assign only the necessary rights to a group rather than granting broad access to many individuals. Auditing is clearer because you can see which groups have access to a folder and who belongs to those groups.

Assigning access by individual users is cumbersome and error-prone as the organization grows. Denying access by default and never granting would block legitimate work, and granting access to all users by default is insecure and contradicts proper access control.