Delegated administrators · Self-hosted

Delegated administrators

The fadmin account is the appliance’s root admin and has access to everything. For most organisations there’s a need for narrower roles: an auditor who needs to view activity logs but shouldn’t be able to change settings, a helpdesk team that needs to manage users and shares but not authentication, a search admin who maintains crawl schedules but doesn’t see the rest of Foldr Settings.

Delegated administrators provide that. Any LDAP / Active Directory user, AD group, or Foldr-local user can be granted access to specific areas of Foldr Settings while remaining locked out of the rest. The fadmin account continues to work alongside.

Assigning a delegated admin

  1. Open Foldr SettingsApplianceAdministrators and click + Add Users or Group.

    Screenshot: Assigning a delegated admin

  2. Search for the user, group, or local Foldr account you want to grant access to.

    Screenshot: Assigning a delegated admin

  3. Tick Use Settings. This is the master toggle: without it, the user can’t sign into Foldr Settings at all and the per-area permissions stay greyed out.

    Screenshot: Assigning a delegated admin

  4. Tick the additional permissions you want to grant. The example below shows Senior Management granted access to user activity logs only.

    Screenshot: Assigning a delegated admin

  5. When the permission set is complete, click Update at the bottom right.

    Screenshot: Assigning a delegated admin

  6. Click SAVE CHANGES at the top right to commit.

    Screenshot: Assigning a delegated admin

What delegated admins see

Members of the granted group can now sign into Foldr Settings at:

  • https://<your-foldr>/settings on Foldr v10 and later
  • https://<your-foldr>:30537/settings on Foldr v9 and earlier

They land in a Foldr Settings UI showing only the areas you’ve granted access to. Everything else is hidden.

Screenshot: What delegated admins see

Practical patterns

  • Audit-only role: tick Use Settings plus Activity view. The user can read logs and export them but can’t modify anything.
  • Helpdesk role: tick Users, Shares, Devices to manage day-to-day account and access issues without exposing authentication or licence settings.
  • Search admin: tick Search and (optionally) Activity to manage crawl schedules and watch the related logs.
  • Compliance officer: tick Activity plus the relevant share-management areas; they can review what’s happened and adjust per-share retention or sharing limits without seeing identity config.

← All articles