In this article, we shall discuss “How to Configure Synology DS923+ NAS for File Sharing [Part 2]”. File sharing is the process of distributing or providing access to digital files, such as documents, images, videos, or software, across a network. This allows multiple users or devices to access, modify, or collaborate on the same files, either locally within an organization or over the internet. Please see Fix MDT Workbench Crashes when opening WinPE tab Properties, how to fix a vulnerable Trusted Platform Module [TPM], and How to install Windows Server unto ACEMAGICIAN Mini PC.
File sharing can be facilitated through various methods, including network-attached storage (NAS), cloud storage services, peer-to-peer (P2P) networks, and direct file transfers. It enables great collaboration, centralized data management, and reduces the need for multiple versions of the same file. Thereby making it essential for businesses, teams, and individuals daily usage.
How to Grant Local Admin Permissions to a Group [Part 1], how to create folders and enable file sharing on Windows, and how to create hidden share folders on Windows devices
Create Shares and Configure ACLs on Synology NAS
The diagram below illustrate the steps in configuring ACLs (Access Control Lists or permissions on folders on a Synology DS923+ NAS. This involves creating users, assigning them to groups, and setting specific permissions for each folder.
In your company, you will likely manage numerous users and groups. Although it’s possible to assign folder access individually to each user, this approach isn’t recommended, especially in larger setups.
However, for a very small company, this method may be acceptable. Below is the table showing a list of users and the group they belong to.
| Users | Groups Assignment |
| Alice | Finance_Group |
| Matthew | HR_Group |
| Oziegbe | Engineering_Group |
The table below outlines the permissions assigned to each user group based on the folder each group is associated with.
| Folder Permissions | ||
| HR_Folder | Finance_Folder | Engineering_Folder |
| HR_Group: Full Control | Finance_Group: Full Control | Engineering_Group: Full Control |
| Others: No Access | HR_Group: Read Only | Finance_Group: Read Only |
| Others: No Access | Others: No Access |
Learn how to Create Folders and Enable File sharing on Windows, how to integrate ObjectFirst OOTBI Appliance with VBR, how to Setup iSCSI Target and Storage LUN on Synology DS923+ for VBR.´, and how to Manage User Permission on Synology with Active Directory [Part 1].
Create Users Accounts on Synology
Synology makes it relatively possible to create user accounts for individual, family members or business employees, giving you flexible control over permissions and access.
Note: By setting up users, you can easily manage shared folder access as discussed previously, assign storage and folder quotas, and enforce bandwidth limits for each person.
Additionally, you can delegate administrative roles to specific users or groups, reducing the workload for IT administrators and streamlining management tasks. Please follow the steps below to create users on a Synology NAS.
Navigate to the Control Panel > User & Group > User and click on “Create”. Populate the fields as you wish and click Next. This article discusses the Step-by-step guide on how to set up the Synology DS923+ NAS..
Note; Since we have not created any Group yet as desired, I will click on Next to proceed. I will proceed to create a group next. This way, I can show you the step to add a user to a group during user creation.
Also, we do not have a folder, I will click next.
For this topic, we do not care about quotas. Click Next to continue.
Also, on the application permission, click next to continue.
I do not care about the user speed limit. click next to have the account created.
Create Groups
User group simplifies management by allowing you to assign permissions to multiple users at once. This ensures consistency and saves time compared to managing users individually.
We will achieve this by categorising user accounts into custom user groups. To create a Group, navigate to Control Panel > User & Group > Group and select create. Populate the field and click next.
Now that we have a user created that will be part of this user group, I will select it on the fly and click next.
I do not have a folder yet, so I will click Next.
Not interested in group quota for now, I will click next.
Also, I am not interested in application permission, I will click next.
Please carefully g through the confirmation window to confirm everything is correct and click on “Done” to complete it.
Great Folders
Next, I will be creating a “Shared Folder” on the Synology NAS. A Shared Folder is necessary for centralized storage and collaboration. This allows multiple users to access, store, and manage files in a common location.
This setup is ideal for our scenario at hand where multiple users need access to the same data while maintaining control over permissions and access levels.
Note: Before creating a Shared Folder, you need to create a Volume on Synology. A volume is where data is stored on a storage pool. You can do this via the Storage Manager.
To create a folder, select “Shared Folder” and click on Create. In the drop down list, select “create shared folder”.
Enter the basic information and click next
Not interested about encryption at his point. I will click next to proceed.
Also, on the advanced settings, I will click next to proceed.
Please review tje shared folder creation and click next.
In the configure user permission, we are not interested in working with local users. We will have to click on “local groups”.
Here we will assign the Read/Write permission to the HR_Group due to our use-case.
Note: I will proceed and create other users, groups and folders behind the scene. Thereafter, we can test various permissions assigned to these users based on the groups they belong.
Users, Groups , Folders Created and Permissions Assigned
The image below shows all test users have been created
Also, we have created all he required groups on Synology
Alice is the user left we have not assigned permission to. Let’s quickly do this.
Le t us review the permission assigned to the Finance Group. Here the Finance group has R/W access and the HR group has “Read Only” as defined above.
Let’s review the Engineering Folder permission as well.
If you ever wish to modify these permissions in the future. Please select the folder and right click on it and then select “Edit”.
This way, you could add other group access or individual users to this group.
Test permission for different users
Log in as different users from the respective groups and verify that each user has the correct level of access to the shared folder. We will start with Matthew and as you can see below, we have only assigned the HR_Group access to him and as such he can only access the HR_Folder.
For Alice, she is a member of the Finance group with Full Access. Note that the Engineering Folder has two group access. Therefore, she has access to both folder but not full access on the Engineering Folder.
Since the folder has the Engineering Group Full Control permission, but she is not a member of this group. She will not be able to create any object in the folder.This is because, she has the “Read only” permission assigned to the Finance group on this Finance Folder.
Oziegbe is part of the Engineering Group and this group was only assigned to the Engineering Folder. Therefore, oziegbe will only be able to access this folder.
Note: After configuring Synology DS923+ NAS for File Sharing (setting up the shared folder), enable file services by going to File Services in the Control Panel, where you can activate protocols like SMB, AFP, or NFS depending on the operating systems in your network.
Once these settings are configured, users can easily connect to the shared folder from their computers or mobile devices, enabling seamless file sharing across your organization.
Please see Azure Virtual Desktop: Connect to Session Hosts Using Entra ID [Part 04], and Azure Virtual Desktop: Autoscaling Implementing and Monitoring Session Hosts [Part 05].
Recommendation for protection user Accounts on Synology
You may want to learn about other steps to protect your user accounts and Synology DS923+ NAS etc. You will find more information here: DSM Security: How to Protect Synology DS923+ NAS.
Ensure you have 2-Factor Authentication assigned to your users
Depending on your need, also ensure you have Account Protection enabled for your users.
Here is a YouTube video on managing user permission on synology.
I hope you found this article on “how to Configure Synology DS923+ NAS for File Sharing [Part 2]” very useful. Please feel free to leave a comment below.
