Access to Files in Bitrix24: Why It's Critical
The sales department sees accounting payroll records. Interns have access to strategic documents. A dismissed employee still opens files via a saved link. This is not hypothetical — we encounter such situations weekly. The reason is simple: file access rights are not explicitly configured. By default, Bitrix24 gives too broad access, and without proper configuration, corporate documents end up in the wrong hands. We set up Bitrix24 file access rights based on your company structure, ensuring each employee sees only what they need. In 2–3 days, we design and implement a rights matrix that prevents leaks and automatically adapts to staffing changes. You gain transparent control over corporate data. Our experience: 5+ years, certified Bitrix24 specialists.
How the Bitrix24 Rights Model Works
File and folder rights operate on multiple levels. Official Bitrix24 documentation: "Rights are inherited top-down unless specified otherwise." Here are the key levels:
| Level | What It Determines | Where to Configure |
|---|---|---|
| Common Disk | Access to root company folders | Disk Settings → Access Rights |
| Workgroup | Access to files within the group/project | Group Settings → Members and Roles |
| Folder | Access to a specific folder and its contents | Folder context menu → Access Rights |
| File | Access to an individual file | File context menu → Access Rights |
Levels are inherited top-down: if the marketing department has access to the "Marketing" folder, all files inside are also accessible to that department. Inheritance can be broken at any level by setting custom rights for a subfolder.
What Types of Rights Exist?
Bitrix24 distinguishes several access levels:
- Full access — read, edit, delete, manage rights. For managers and administrators.
- Edit — read and modify content. Without the ability to delete others' files or change rights.
- Read-only — view and download. Changes prohibited.
- No access — explicit deny. Used to exclude a specific employee or department from inherited access.
How to Configure Rights by Company Structure
The most effective approach is to assign rights not to individual employees but to departments and roles. When an employee transfers between departments, access changes automatically. This reduces the admin workload by five times compared to individual assignments. Example access matrix for a typical company:
| Folder | Management | Accounting | Sales | Marketing |
|---|---|---|---|---|
| Finance | Full | Full | No | No |
| Commercial Proposals | Read | No | Full | Read |
| Marketing Materials | Read | No | Read | Full |
| Regulations | Read | Read | Read | Read |
Public Links and External Access: The Main Vulnerability
Employees often share files via public links — it's convenient but extremely dangerous. The link works without authentication: anyone with the link can download the file. We control:
- Ban on creating public links for critical folders (finance, HR, strategy)
- Link expiration — automatic deactivation after a set number of days
- Password on the link — an additional barrier for external counterparties
- Sharing log — recording all publishing actions
Thanks to these measures, we reduce the risk of leaks via external channels by 90%.
How to Organize Access Auditing
We set up monitoring of file actions: who opened, downloaded, edited, deleted, changed rights. For highly critical folders (e.g., "Finance"), we configure notifications: any change in rights triggers an alert to the admin in the chat. This data is available through the Bitrix24 event log.
What's Included in Access Rights Setup (Deliverables)
- Folder access rights matrix by departments and roles
- Inheritance hierarchy with specific exceptions
- Public link policy: bans, expiration, passwords
- File action auditing and notifications on rights changes
- Rules for external users (extranet) — access only to project folders
- Employee instruction on working with rights and sharing
- Confidentiality guarantee and recovery in case of error
Setup Process in 2–3 Days
- Audit of current file structure and rights
- Design of access matrix with department heads
- Implementation of rights at all levels (disk, groups, folders, files)
- Testing: verify access from different roles
- Training key employees and handing over the instruction
- Post-support: adjustments after one week of operation
Typical Mistakes During Setup
- Assigning rights directly to employees instead of departments — upon dismissal or transfer, rights remain.
- Ignoring inheritance — accidentally granting access to the entire company.
- Absence of a public link policy — data leaks via external channels.
We fix these mistakes and build a system that does not require constant intervention. Our experience: 5+ years setting up Bitrix24, certified specialists. Contact us for a consultation — we'll assess your project for free. Order Bitrix24 file access rights setup turnkey.