MediaLab includes a fine-grained permission system that controls user access to both media and features.

Owners, Administrators, and Media Managers

• These roles have unrestricted access to all content and all management features.
• Their access cannot be limited to specific folders or features.
• Use caution when assigning the Administrator role, as admins can manage users and delete media.

Uploaders and Regular Users

• By default, these roles have no access to media or features.
• Access must be explicitly granted through groups and permissions.

Access to Media (via Groups)

1. Go to Settings → Permissions → Groups.
2. Create a group (e.g., External press).
3. Add users to the group.
4. Select the folders (root or subfolders) the group can access.
   • Example: A top-level folder Press with subfolders for individual press agencies.
   • Subfolders require access to the parent folder — access cannot be granted to a subfolder alone.
5. Users can be members of multiple groups, inheriting access from all of them.

Administrators and owners do not need group membership — they automatically have access to all media.

Access to Features (via User Flags)

• By default, regular users can view media only.
• Uploaders can upload new content.
• Additional feature access (e.g., sharing, editing) can be granted through user flags.