Groups

A group is a way to bundle people together so you can manage their access as one unit instead of one user at a time. Groups let you assign data policies to many users at once: add someone to a group, and they pick up everything that group grants.

You'll find groups under Directory → Groups in the console. The other Directory tab, Users, is covered in Users.

The groups list

The Groups tab shows a searchable, paginated table of every group in your organization. Each row shows:

• Name - the group's name. If the group has a description, it appears as a tooltip when you hover the name, so the row stays clean.
• Members - how many users belong to the group.
• Data Policies - how many data policies are applied to the group.
• Created By - the email of the person who created (and owns) the group.
• Updated - when the group was last changed.

Use the search box to find groups by name or description. Selecting a row opens that group's detail page.

Create a group

Select New Group to open the create dialog. Name the group and optionally describe what it's for:

• Group Name - a clear label for the group.
• Description - optional. A good description explains what the group is for (for example, "Eastern region sales") so teammates understand it at a glance.

Select Create to save. The new group appears in the list, owned by you.

The group detail page

Selecting a group opens its detail page. A breadcrumb (Directory › Groups › this group) gives you a way back at every step.

The header shows the group's name and description, with a line noting who the group is owned by. Below the header sit two areas: Members and Data Policies.

Edit a group

There are two ways to change a group's name or description, both available to the owner:

• On the detail page - the name and description are inline-editable. Select either to edit it in place.
• From the list - each row the owner controls has an actions menu with Edit, which opens the same dialog used to create a group, pre-filled with the current values.

Delete a group

From the list's row actions menu, the owner can also Delete a group. Deletion is permanent and can't be undone.

• For an empty group, you simply confirm.
• For a group that still has members, you're warned that members will lose any access granted only through this group, and you must type the group's name to confirm - a safeguard against deleting a group people are relying on.

Add and manage members

The Members section lists everyone in the group. Each member row shows:

• Name - avatar, name, and email address.
• Source - a badge showing how the person joined the group: Manual if an owner added them by hand, or a synced badge if they were brought in automatically from your identity provider.
• Role - Owner for the group's creator, or Member for everyone else.

Add members

If you're the owner, select Add members to open the user picker. Search for users by name or email and select one or more to add. People who are already in the group are filtered out of the picker, so you can't add anyone twice.

Remove members

Each member row (other than the owner's) has a remove action for the owner. Removing a member asks you to confirm first. The owner can't be removed from their own group.

How groups connect to access

Groups are the bulk lever for access. A group can have data policies applied to it, and every member of the group inherits those policies - that's the whole point of grouping people. You can see this from the other side too: on a user's details page, the Data Policies section lists the policies a person inherits from each group they belong to, badged with the source group. (See Users.)

The Data Policies area on the group detail page is where group-level policies surface. Data policies, roles, and the rest of the permissions model are configured in Access control - head there to understand what a policy grants and how to build one.

Related

• Users - the member list, invitations, and per-user roles and access.
• Access control - data policies, roles, and permissions that groups feed into.