The technology takes an afternoon. The structure takes a decision. This page gives the group, folder and sharing rules that keep a Nextcloud office clean for years instead of months.
Ask any office that abandoned its file server why, and the answer is rarely speed — it is mess. The same quotation in four places, a resigned employee’s folder holding the only copy of client records, everything shared with everyone "for now". All of that is decided on day one, by structure. Groups, group folders and three written sharing rules prevent almost all of it.
Departments get group folders owned by the company. Personal folders stay personal. Files stop disappearing when people leave.
Create one group per department — Accounts, Sales, HR, Operations, whatever your office actually has — before you create a single user account. Every person is then created inside their group, and permissions are given to groups, never to individuals. When someone changes departments, you move their group membership and every permission follows. When you grant access person by person instead, permissions become an untraceable web within a year, and nobody can answer the simple question "who can see the salary file".
Nextcloud’s Group Folders are shared folders owned by the system, not by any person. This is where all department work belongs. The alternative — a senior person sharing their personal folder with the team — works until that person leaves, is on leave, or deletes something, and then the department discovers its files were a guest in someone’s private space. Personal folders are for personal work files only. Make this a written office rule, say it in the first training session, and repeat it kindly when it is broken.
Agree one folder and file naming style on day one: for example ClientName - Document - 2026-01 style dates and no files called "final", "final2" or "new final". Nextcloud keeps version history automatically, so "final" copies are pure waste. Ten minutes of naming discipline in week one saves an hour of searching in month six, multiplied by every employee, forever. Put the rule on one page, pin it where staff can see it, and let the group folder admins gently enforce it.
The person who manages the system should have two accounts: an admin account used only for administration, and their normal account for daily work. Daily browsing with an admin account means one careless click — or one piece of malware in a browser session — has the keys to everything. It also keeps the audit log readable: when "admin" changes a permission at 2 pm, you know it was a deliberate act, not someone tidying their own folder.
The video above shows the running system. Set your groups and folders up like this on day one and the system stays clean.
Watch Full VideoThis is exactly the failure group folders prevent. For now, an admin can recover access to the account and move the work files into the department group folder. Then change the rule going forward: department work lives in group folders, and exit checklists include a file handover.
You can restrict link sharing to specific groups, require passwords, and set maximum expiries — and you should. Be honest about the limit: a determined person can always copy data another way. Controls stop accidents and casual leaks; trust and policy handle the rest.
Technically an admin can reach everything anyway. The healthy pattern is the boss in the groups they actually work with, and admin access used deliberately, not as a daily all-access pass. It keeps the audit trail meaningful and avoids accidental deletions in departments they rarely touch.