One folder, many teammates — each person with their own login and the right level of access. Here is the complete Synology DSM team folder setup, in the same order the video shows it.
A common office scene: one Synology NAS, one folder full of team documents — and everybody logging in with the same admin password because nobody set up proper user access. The fix takes a few minutes in DSM. You create a shared folder, give every person their own account, and decide folder by folder who can write, who can only read, and who is denied completely. This guide follows the video step by step: create the folder, hide it from outsiders, set an optional quota, assign permissions, and finally verify everything using a normal user's account before the team starts working.
Every permission change on a Synology NAS needs an administrator account. A normal user cannot create shared folders or change who can access them.
http://192.168.1.50:5000A team folder is simply a DSM shared folder — the top-level folder that Synology permissions are built around.
GoogleDocs or TeamWork — the whole team will see this nameIn the same wizard, tick Hide this shared folder in My Network Places and Hide sub-folders and files from users without permissions. Users who have no right to a folder will not even see it while browsing the network. Understand the honesty here — hiding is tidiness, not security. The real protection is the permission you set in the next step. A hidden folder is still protected only because access itself is denied.
The wizard offers a shared folder quota. This is optional and can be changed later, but setting it on day one stops one team folder from quietly filling the entire NAS volume. Pick a size that fits the team's real work, not the biggest number available.
The last wizard screen is the heart of the whole setup. For each user you choose one of three levels:
Give everyday team members Read/Write on their own team folder, Read only on folders they only need to view, and leave every unrelated folder untouched. In DSM, Deny always wins — if a user is allowed through a group but denied directly, the deny applies.
The step most people skip — and the step that proves the setup is real.
\\192.168.1.50 in File Explorer and sign in with that user's own name and passwordOnly when a normal user sees exactly what you planned is the job finished. If something looks wrong, fix it now — while it is still a setup task and not a data accident.
See the full setup live — creating the folder, setting permissions and verifying access with a second user.
▶️ Watch Full VideoYes. DSM permissions, quotas and audit logs all work per user. One shared account means everyone has the same rights, and you can never tell who deleted or changed a file.
A Read only user can open and copy files but cannot change or delete them. No access (Deny) blocks the user completely — and in DSM, a deny always overrides any allow the user gets through a group.
Yes. In File Explorer, type the NAS address like \\192.168.1.50, sign in with the user's own DSM username and password, and the folders they are allowed to see will appear. You can also map it as a network drive.