Hello @eballinger 

In Databricks, the users group (sometimes shown in the UI as All workspace users) has default permissions that cannot be revoked at the top-level Shared folder. Docs

So looks like:

• It’s not possible to create a folder under /Shared that is restricted only to a team by removing All workspace users.

• Any new folder created under /Shared will always inherit “Can Manage” for the users group.

If you want a team-only folder, you’ll need to create it outside /Shared (e.g., under /Workspace/<Team Folder>)

Hope this helps 🙂

Isi