Groups

The Groups page (/admin/groups) lets workspace administrators combine users into groups and optionally assign all members of a group a shared role in the workspace. Only admin users can access this page.

Groups bundle users for easier management. When you assign a role to a group, all members receive that role. Using Auto-Assignment Rules, users can additionally be added to a group automatically at login based on values from their identity provider.

The Group List

The overview shows all existing groups in a table with the following columns:

Column	Description
Name	The group's unique internal name
Display Name	The name used for display
Role	The workspace role assigned to the group (or No role)
Created	The date the group was created

Click a row to open the group's detail view. If no groups exist yet, the message No groups found. appears.

Creating a Group

1. Click Create Group
2. Enter a unique name under Name (required field)
3. Optional: Provide a Display Name and a Description
4. Under Role, choose the workspace role that all members should receive: - (no role), Administrator, Creator, or User
5. Click Create Group again

After saving, the new group's detail view opens.

Managing a Group

In a group's detail view, you manage its members and auto-assignment rules. Using the buttons in the upper right, you can Edit or Delete the group.

Members

The Members card lists all users in the group along with their email address and role.

1. Click Add Member
2. Use the Search users... field to find an existing user (by email address or username)
3. Click the desired user to add them to the group

To remove a member, click the trash icon next to the entry. If the group contains no members, the message No members in this group. appears.

Editing a Group

Using Edit, you open the Edit Group dialog, where you can adjust Display Name, Description, and Role. Confirm with Save.

Deleting a Group

Using Delete, you remove the group after a confirmation prompt. The associated user accounts are preserved.

Auto-Assignment Rules

With Auto-Assignment Rules, users are added to the group automatically at login as soon as a value from their identity provider matches a rule. This lets group membership be managed centrally through the auth provider instead of adding each user manually.

Each rule consists of a list of Values (e.g. group or role information from the identity provider) and a specification of which Auth Provider it applies to. When a user logs in and their identity provider supplies one of the stored values, the user is assigned to the group.

To add a rule:

1. On the Auto-Assignment Rules card, click Add Rule
2. Under Values (comma-separated), enter one or more values separated by commas (e.g. value1, value2, ...)
3. Under Auth Provider, choose either All Providers or a specific configured provider instance
4. Click Create

Each rule is displayed with its values and its associated auth provider. If you choose All Providers, the rule applies regardless of which provider instance a user logs in through; if you choose a specific instance, it applies only to logins through that instance. Use the trash icon to remove a rule again. If no rules exist, the message No auto-assignment rules. appears.

note

Auto-assignment rules are evaluated at login. Existing memberships are therefore only updated the next time a user logs in.

Notes

• The mapping of Values to the information from your identity provider depends on what information the respective provider transmits at login. You configure the available provider instances on the Auth Providers page.
• You manage individual users and their roles on the Users page.