Share permissions

Depends on what permissions you want them to have to the files stored in the folders on this share.  If they just need to read the files, List folder contents and Read permissions on the security tab and the share tab will work.  If they need to be able to change files or create files, they need read, list folder contents, modify and write permissions on the security tab and change permissions on the share.

Most modern OS's will add the permissions to the security tab if you add them to the permissions on the share tab, but double check to make sure that is the case.

Sorry I missed some details in my question

I have ShRoot  which is a share.
under ShRoot I have several folders, Folder1, Account, Folder2, Market,etc...

The ADgr will have access just to Folder1 and Folder2

I am not sure when I add a group to Share permission tab, it will be added automatically to Security tab

I am not sure when I add a group to Share permission tab, it will be added automatically to Security tab

It doesn't add to the security permissions automatically. They are separate.

Set the Share permissions to Everyone - Full Control. Then use the Security tab to control the permissions users have. Since there are other folders that you do not want this group to have access to it makes the configuration more involved.

On each folder in ShRoot disable inheritance and add the groups that should have read and write permissions to the folder. Then on the ShRoot permissions, make sure the ADgr has read permissions.

So on the Share, I should not add any group or user to the Security tab ? if so why the security tab is there ?

if I understand, under Share permissions tab, give either Everyone or Authenticated Users or Domain Users, Full or Change.
Do Nothing under Security tab of the Share
On each folder , block inheritance and add ADgr group to the Security tab and assign permissions

I believe the confusing part is that Security tab on the Share itself, why it is there and when should we use it

Sorry, I wasn't clear.

On each folder in ShRoot
- go to properties -> Security tab -> Advanced
- Disable inheritance and add the groups that should have read and write permissions to the folder

Then on the ShRoot:
- go to properties -> Security tab
- make sure the ADgr has read permissions
- click on the Share Permissions tab
- add "everyone" and grant them full control

Then on the ShRoot:
- go to properties -> Security tab
- make sure the ADgr has read permissions
- click on the Share Permissions tab
- add "everyone" and grant them full control

That's where I have been challenged.
I have been told, you can give, Share Permissions tab, Authenticated users Full Control, then nothing on the Security tab

Then on each folder you want ADgr to have access, disable inheritance , add the group to the folder and assign permissions.

*** What I thought was,  in Share Permissions tab, give Authenticated users Full Control,  on the Security tab give Authenticated users Read only and Select Only to this folder.

Then on each folder you want ADgr to have access, disable inheritance , add the group to the folder and assign permissions.

Thank you Guys--
I will test it in the Lab later

Glad to help. :)