---
url: >-
  https://docs.codatum.com/features/notebook/sharing/additional-permissions/overview.md
description: >-
  Add permissions for teamspace and private notebooks to specific users or
  groups
---

# Additional notebook permissions (Optional feature)

Additional notebook permissions let you grant access to a notebook to specific users or groups, separately from the basic permissions determined by [folder](../../folder). See [Sharing](../overview#comparison) for a comparison of sharing methods.

You can configure this for notebooks under the following folders.

* [Teamspace](../../../../workspace/administration/teamspace)
* Private

You can't configure this for notebooks under the **Workspace** folder.

A notebook granted additional permissions is shown in the other party's **Shared folder**. See [Notebook](../../../../permissions/resources/notebook#scope-shared) for the conditions for each operation.

::: tip
This is an **optional feature**. Depending on your contract, it might not be available.
:::

## Configuring {#configure}

Configuring additional permissions requires share permission on the notebook (the "sharing with users or groups" permission in [Notebook](../../../../permissions/resources/notebook)).

1. Open **Share** on the notebook screen.
2. Open **Additional notebook permissions** in the **Notebook** tab.
3. Select **Add group or member**, then choose a user or group and specify a role.

You can grant the following roles. The default is **Notebook viewer**.

| Role {.nowrap} | Description |
| --- | --- |
| **Notebook editor** | Can edit the notebook. |
| **Notebook viewer** | Can view the notebook. |

You can also change or remove a role from the same screen. You can't edit additional permissions when opening a notebook from the **Shared folder** side.

## Specification {#spec}

* The workspace role and the notebook role are evaluated with AND. Even if you grant **Notebook editor**, the recipient can't edit if their workspace role is workspace viewer (see [Permission evaluation rules](../../../../permissions/overview#evaluation-rules)).
* A notebook that's only accessible through additional permissions can't be deleted or moved, even with edit permission (see [Notebook](../../../../permissions/resources/notebook#scope-shared)).
* Whether SQL can be run is determined by permissions on the target [connection](../../../../permissions/resources/connection), not by notebook permissions.
* Moving a notebook between workspace / teamspace / private changes the scope of its basic permissions (see [Folder](../../folder)).
* A [workspace owner](../../../../workspace/administration/user#workspace-roles) can view the change history of additional permissions from **History** (see [Audit logs](../../../../workspace/access-and-security/audit-log)).