Bonjour Henri,

we have had the same kind of problem and solved it server side by filtering some actions (such as synchronize) according to the membership of the current user to a dedicated group. By default, users cannot use Nuxeo Drive, some can only edit online and others can synchronize folderish documents.

Thanks Pibou ! This is actually a solution. I changed filters like this, but nothing changed :

<extension target="org.nuxeo.ecm.platform.actions.ActionService"
        point="filters">

<filter id="can_drive_edit">
          <rule grant="true">
                <condition>#{nuxeoDriveActions.canEditDocument(document)}</condition>
                <condition>#{currentUser.isMemberOf('membersEdit')}</condition>
          </rule>
          <rule grant="false">
                <facet>Collection</facet>
          </rule>
        </filter>

 <filter id="can_sync_current_doc">
          <rule grant="false">
                <type>Domain</type>
                <type>SectionRoot</type>
                <type>TemplateRoot</type>
                <type>WorkspaceRoot</type>
                <type>Forum</type>
                <type>Collections</type>
          </rule>
          <rule grant="true">
                <condition>#{canSynchronizeCurrentDocument}</condition>
                <condition>#{currentUser.isMemberOf('membersSynchro')}</condition>
          </rule>
        </filter>

</extension>

Any idea ? Henri