> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Folders

> Organize PAM accounts and control who can access them.

A folder holds [accounts](https://infisical.com/docs/documentation/platform/pam/accounts/overview.md). When you give a user, group, or machine identity a role on a folder, the role applies to every account in the folder, including accounts added later.

Put accounts in the same folder if the same people need them. For example, you can create one folder per team (`backend-team`), per application (`checkout-service`), or per environment (`prod`), depending on how access works in your organization. If a user or group needs only one account from a folder, give them a role on that account instead of on the folder.

## Create a folder

Only product admins can create folders. To learn how to become one, see [Product membership](https://infisical.com/docs/documentation/platform/pam/concepts/access-control.md#product-membership).

**Step 1**

Go to **Privileged Access Management** > **Accounts**.

**Step 2**

Select the arrow next to **Add Account**, then select **Add Folder**.

**Step 3**

Enter a **Name** and an optional **Description**, then select **Add Folder**.

After you create the folder, give at least one person the Admin role on it, so they can add accounts and manage the folder's access.

## Give people access to a folder

To give a user, group, or machine identity a role on the folder, follow the steps in [Assign a role](https://infisical.com/docs/documentation/platform/pam/concepts/access-control.md#assign-a-role). To learn what each role allows, see [Folder and account memberships](https://infisical.com/docs/documentation/platform/pam/concepts/access-control.md#folder-and-account-memberships).

If some accounts in the folder need approval before anyone can use them, the folder's Admins choose the approvers on the folder's **Approvals** tab. To learn how, see [Access requests](https://infisical.com/docs/documentation/platform/pam/access-requests/overview.md).

## Join a folder as an organization admin

If you have the organization [Admin role](https://infisical.com/docs/documentation/platform/access-controls/role-based-access-controls.md), you can make yourself the Admin of any folder, such as a folder whose last Admin has left the company.

**Step 1**

Go to **Privileged Access Management** > **Accounts**. Folders you aren't a member of show a **Not a Member** badge.

**Step 2**

Open the options menu on the folder's row and select **Join as Admin**, then confirm.

The Admin role replaces any role you already had on the folder. Infisical notifies the folder's other Admins and records the join in the [audit logs](https://infisical.com/docs/documentation/platform/pam/auditing.md).

## Next steps

> [card] [Account templates](https://infisical.com/docs/documentation/platform/pam/templates/overview.md)
>
> Set the rules for connecting to the accounts that use a template.

> [card] [Accounts](https://infisical.com/docs/documentation/platform/pam/accounts/overview.md)
>
> Store the credentials for a database or server that people and agents connect to through Infisical PAM.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.