--- title: What Is The Difference Between Allow, Inherit, and Deny ? description: Allow vs. Inherit vs. Deny --- [Skip to content](https://support.governmentframeworks.com/knowledgebase/what-are-laserfiche-security-rights#main-content) English Show submenu for translations ![GovernmentFrameworks\_Logo\_Full Colour (3).png\]](https://support.governmentframeworks.com/hs-fs/hubfs/GovernmentFrameworks_Logo_Full%20Colour%20(3).png?height=40&name=GovernmentFrameworks_Logo_Full%20Colour%20(3).png) Open main navigation Close main navigation - English Show submenu for translations - Go to GovernmentFrameworks.com Go to GovernmentFrameworks.com Hello, how can we help you? - There are no suggestions because the search field is empty. 1. [Help Center](https://support.governmentframeworks.com/knowledgebase?hsLang=en) 2. [Laserfiche Functionality](https://support.governmentframeworks.com/knowledgebase/laserfiche-functionality?hsLang=en) # What Is The Difference Between Allow, Inherit, and Deny ? If there are any unfamiliar terms within this article, please consult our [glossary](https://support.governmentframeworks.com/knowledgebase/glossary-of-common-terms?hsLang=en)  As an Administrator, you have the ability to set security access rights for Users and Groups. These access rights apply to different "parts" of Laserfiche, which can be accessed by navigating to: **Account Administration \> Account \> Groups (or Users)** Regardless of whether you look at Users or Groups, you will see a section called **License and Access** which includes: - - Account - Repository - Public Portal - Process Automation - Developer Console You can either click **Expand All**, or click the **\>** symbol to see an expanded view. For example, the expanded view for Account would show: - - Account Administration - Billing Administration - Trustee Administration - View User Group Membership Select the **Presets** drop-down menu, and you can choose to grant Full Rights, Inherit All, or Remove All Rights. ### Allow, Inherit and Deny **Allow** gives the Group or User specific access to that right. Allow will trump a blank check box, meaning the Group or User will be given that right, even if the Inheritance setting was left blank at a higher level. By default, a New User will automatically receive access rights assigned at a higher level in the folder structure, such as on the parent folder. This is referred to as **Inheritance**. When rights are inherited they apply to all subfolders and documents within the folder unless explicitly allowed or denied. If a right has not been specifically set for the User , meaning it is blank, the user may still inherit that right from a higher level, as long as there are no denying settings that conflict with it. **Deny** trumps everything, and should be used judiciously. If a Group or User is explicitly denied rights access, it does not matter what access they have been given at other levels. This can make it tricky to determine why a particular Group or User cannot access certain areas or features of the repository, because they may have been denied access rights somewhere else on the folder tree. If you leave an access right checkbox blank, a Group or User will not have that right, unless it has been set differently at a higher level. You may decide to allow or deny specific access rights based on the Group or Users job requirements.     Should you have any further questions, or this article does not complete your help request, please log in to the GFW client support area and lodge a support ticket using [this link](https://support.governmentframeworks.com/home/new?hsLang=en) ![Matthew](https://support.governmentframeworks.com/hs-fs/hubfs/Matthew.jpg?width=153&height=154&name=Matthew.jpg) This article was written by Matthew Clooney. [Click here](https://support.governmentframeworks.com/knowledgebase/gfw-authors?hsLang=en) to learn more about our authors.        - [Cascade Functionality](https://support.governmentframeworks.com/knowledgebase/cascade-functionality?hsLang=en#main-content) - [Planning](https://support.governmentframeworks.com/knowledgebase/cascade-functionality?hsLang=en#planning) - [Reporting](https://support.governmentframeworks.com/knowledgebase/cascade-functionality?hsLang=en#reporting) - [Snapshots](https://support.governmentframeworks.com/knowledgebase/cascade-functionality?hsLang=en#snapshots) - [Administration](https://support.governmentframeworks.com/knowledgebase/cascade-functionality?hsLang=en#administration) - [Laserfiche Functionality](https://support.governmentframeworks.com/knowledgebase/laserfiche-functionality?hsLang=en) - [ProcessPro Functionality](https://support.governmentframeworks.com/knowledgebase/processpro-functionality?hsLang=en) - [FARMER](https://support.governmentframeworks.com/knowledgebase/farmer?hsLang=en) - [Glossary](https://support.governmentframeworks.com/knowledgebase/glossary?hsLang=en) - [Article Authors](https://support.governmentframeworks.com/knowledgebase/article-authors?hsLang=en)   Copyright © 2025, GovernmentFrameworks.com ```json { "@context" : "https://schema.org", "@type" : "VideoObject", "contentUrl" : "https://stream.mux.com/q33yCZQ5Bg2QCxdcGIEZ8pz34FAWvr01mmh02qn0174xdM/capped-1080p.mp4", "dateModified" : "2025-09-02T20:35:53.279Z", "description" : "This video shows the basic key differences between Security Rights Access", "duration" : "PT52.786S", "height" : 1080, "name" : "What is the Difference Between Allow, Inherit and Deny", "thumbnailUrl" : "https://4582598.fs1.hubspotusercontent-na1.net/hubfs/4582598/Article%20Writing%20-%20Allow%2c%20Inherit%20and%20Deny.mp4/medium.jpg", "uploadDate" : "2025-09-02T20:33:57.726Z", "width" : 1920 } ```