Creating Access Control Lists in SharePoint
Access Control Lists (ACL) work by moving documents from a folder in a document library with specific access rights to another folder in same document library with possibly different access rights. In this way, it is possible to change a documents' access restrictions.
Every folder in a document library is displayed as an ACL within IDM. Setting a special ACL on a document in IDM moves the document in SharePoint to the corresponding folder.