# Users

Administrators can manage file and folder access for both **individual users** and **groups** to control who can perform actions within a site. These permissions govern what users can see and do within their assigned directories, helping ensure a secure and structured environment.

For directory-backed authentication and provisioning, see [Active Directory And LDAP](https://docs.exavault.com/using-exavault/users/active-directory-and-ldap).

## User Home Directories

Each user is assigned a **Home Directory**, which acts as their **virtual root** on the system. Users can only interact with files and folders located **within their home directory**. It is **not possible** to grant access to files or folders **outside** a user’s home directory.

## Managing Access

Access can be assigned at both the **user** and **group** levels. However, the system follows a clear precedence rule:

* **User-level access always overrides group-level access**. If a user has specific access to a folder, that access remains in effect even if their group has different access settings for the same folder.

When a user belongs to **multiple groups** with conflicting access to a folder, the system will apply the access from the **most recently assigned group**.

This behavior helps resolve ambiguity but should be used carefully when managing complex group structures.

## Standard File Operations Matrix

In order to perform standard file operations, the user must have specific rights, either from their user permissions or through access.

| Action                  | Required Rights                 |
| ----------------------- | ------------------------------- |
| See items in a folder   | List Contents                   |
| Download                | List Contents, Download         |
| Create a new folder     | Upload                          |
| Upload a file           | Upload                          |
| Overwrite a file        | Upload                          |
| Rename an item          | Upload, Delete                  |
| Move or Copy            | List Contents, Download, Upload |
| Delete a file or folder | Delete                          |