Group Optional feature

A group is a unit for managing multiple users together and granting them access to resources in bulk. Manage groups from global nav > Workspace settings > Groups.

A user can belong to multiple groups. Permissions granted to a group are inherited by its members and its Group Owners. For how permission evaluation works, see Permissions overview.

TIP

This is an optional feature. Depending on your contract, it might not be available.

Creating and managing

1. Open global nav > Workspace settings > Groups.
2. From New group, specify the group name and members.
3. Select Edit on a row in the list to open Group settings.

Group settings lets you check and manage the following.

• Group name / icon
• Group Owners
• Group members
• Granted permissions (connection / teamspace / notebook / report)

You can also add members from the following entry points.

• Add to group in global nav > Workspace settings > Users
• Specifying a group during email invitations in Invitations and joining

Required roles

For the roles required to create and manage groups, and which resource roles can be granted, see Group permissions.

Group Owner

A Group Owner can edit the target group and manage its members even without being a Workspace Owner. Permissions granted to a group are also granted to its Group Owners.

• A group can have up to 3 owners (Fixed limits and constraints).
• A group can also operate without any owners (zero is allowed).

Granting permissions

Permissions are granted to a group mainly through the sharing and permission settings of each resource. The typical label when selecting a target is Add group or member.

Examples of resources you can grant permissions on:

• Connection
• Teamspace
• Notebook
• Report

Granted permissions in the group settings lets you check permissions that have already been granted. For connections and teamspaces, you can sometimes change the role from here too (only a Workspace Owner can make the change).

Automatic assignment by allowed domain

Automatically assigning a group by email domain is set up not on the group screen, but under global nav > Workspace settings > General > Allowed domains. You can specify a default group for each domain.

For the join flow and constraints, see Invitations and joining.

Constraints

• A Workspace Guest can't belong to any group.
• You can check the maximum number of groups from global nav > Workspace settings > Usage (Fixed limits and constraints).