How To Share Data Using Globus

With Globus, you can easily share research data with your collaborators. You don’t need to create accounts on the server(s) where your data is stored. You can share data with anyone using their identity or their email address.

To share data, you’ll create a guest collection and grant your collaborators access as described in the instructions below. If you like, you can designate other Globus users as "access managers" for the guest collection, allowing them to grant or revoke access privileges for other Globus users.

Note

Sharing with guest collections is available on Globus endpoints managed by an active Subscription. You can create guest collections on Globus Connect Personal endpoints (your laptop, for example) if you are a member of a Subscription Group. Please contact your research computing center or IT manager to upgrade your Globus account to associate our GCP Mapped Collection with a Subscription, or request to join your organizations Subscription Group by Searching Here. If your institution does not have a subscription, please contact us to discuss your needs.

Log into Globus and navigate to the File Manager.
Select the collection that has the files/folders you wish to share.
Highlight the folder that you would like to share and Click Share in the right command pane.

Note

Sharing is available for folders. Individual files can only be shared by sharing the folder that contains them.

Caution

If you are using an ad blocker plugin in your browser, the share button may be unavailable. We recommend users whitelist app.globus.org, docs.globus.org, and globus.org within the plugin to circumvent this issue.

If Share is not available, contact the endpoint’s administrator or refer to Globus Connect Server Data Access Admin Guide for instructions on enabling sharing. If you’re using a Globus Connect Personal collection and you’re a Subscription Group member, enable sharing by opening the Preferences for Globus Connect Personal, clicking the Access tab, and checking the Sharable box.

Note

Documentation on configuring Globus Connect Personal (GCP) is available in our GCP Configuration guides
Click the Add Guest Collection button.
Provide a name for the guest collection (the example below uses DemoGuest), and click Create Collection. If this is the first time you are accessing the collection, you may need to authenticate and consent to allow Globus services to manage your collections on your behalf.
When your collection is created, you’ll be taken to the Permissions tab, where you can set permissions. As shown below, the starting permissions give read and write access (and the Administrator role) to the person who created the collection.

Click the Add Permissions - Share With button to share access with others. You can add permissions for an individual user, for a group, for all logged-in users as well as make files within your Guest Collection accessible to anyone with the URL to your file(s) by selecting the "public (anonymous)" radio button. In the Identity/E-mail field, type a person’s name or username (if user is selected) or a group name (if group is selected) and press Enter. Globus will display matching identities. Pick from the list. If the user hasn’t used Globus before or you only have an email address, enter the email address and click Add.

The example above grants read access to Globus user asecondglobususer@globusid.org. The users you share with will receive an email notification containing a link to the shared endpoint. You may add a customized message to this email. If you don’t want to send a notification, uncheck the Send E-mail checkbox.

Note

Granting write access to a folder allows users to modify and delete files and folders within the folder.

You can add permissions to subfolders by entering a path in the Path field.
After receiving the email notification, your colleague can click on the link to log into Globus and access the guest collection. In the example below, user asecondglobususer@globusid.org accesses the guest collection. Note that the collection name is DemoGuest and the path (/) reflects that the user is in the root of the directory which they’ve been granted access to.
You can allow others to manage the permissions for a collection you create. Use the Roles tab to manage roles for other users. You can assign roles to individual users or to groups. As shown below, the default is for the person who created the collection to have the Administrator role.

The Access Manager role grants the ability to manage permissions for a collection. (Users with this role automatically have read/write access for the collection.) In the example below, the user asecondglobususer@globusid.org is being granted the Access Manager role.

When a role is assigned to a group, all members of the group have the assigned role.