Internet communications between a content management system that stores a plurality of content objects and a third-party system is established. A hierarchy at the third-party system is determined, and a file and folder content object hierarchy at the content management system is generated based on the determined hierarchy at the third-party system. Users of the content management system and users of the third-party system are reconciled by comparing attributes of users of the third-party system with attributes of users of the content management system. Permissions pertaining to user accessed to content objects at the content management system are reconciled with permissions of the third-party system. Reconciled access permissions are applied to content objects of the generated hierarchy at the content management system. Some of the access permissions that are applied to the content object hierarchy of the content management system are more restrictive than the permissions of the third-party system.