Blocking Access to Specific files/subdirectories within a Parent

[Cryptic]

I am setting up user accounts for some lower-level admins to be able to administrate several files and subdirectories within a server. However, ideally I need to give these admins recursive access to a specific root directory while blocking access to certain sub-directories that contain authentication keys for higher-level systems that they should not be given access to

So far I have just been mounting the specific sub-folders they need as virtual drives in a more "whitelist-style" access, but this has not allowed me to give access to the root directory itself (in which there are files they would need to modify) and it also requires me to manually mount every single other subdirectory in the root directory which is a massive pain.

Is there a way to give access to a root directory but block read/write access to specific sub-directories and/or files within that directory?

I am currently using FileZilla Server 1.3.0 on Windows Server 2019

[boco]

Always use the latest version of the server, 1.3.0 has some known problems.

1. First grant access to the root directory, this will include all subdirectories.
2. Next, define the subdirectories the user should *not* have access to as resources and set Access mode to "Disabled". That will lock the subdirectory from being accessed by the user (error 550).

Note: The subdirectory is locked in the virtual filesystem, so, you do not need to enter any physical path for that entry, as long as Access mode is "Disabled". The physical path input field is even locked for that Access mode.

[Cryptic]

That works! Thank you!

I'll be sure to update the server version while I'm implementing this fully as well.