Groups

A Group is a named set of users in your Tenant, such as everyone in Sales. Give a Group Roles, and every member holds the Rights of those Roles, besides the Rights of their own Roles. Someone who joins the Group gets its Rights at once; someone who leaves it loses them at once. Nobody needs to sign in again.

You need the Right to manage Groups for everything on this page. Admins hold it.

See the Groups

In the Admin App, open Groups. Each Group shows its Roles, how many members it has, and who they are.

Create a Group

1. Select New Group.
2. Enter a name. No two Groups of your Tenant can have the same name.
3. Select the Roles the Group gives its members, or none for now.
4. Select Save.

Rename a Group or change its Roles

1. Select the pencil next to the Group.
2. Change the name, or select the Roles the Group should have from now on.
3. Select Save.

Its members get or lose the Rights of those Roles at once.

Add or remove members

1. Select the people icon next to the Group.
2. Select Add next to each user who should join, or Remove next to each member who should leave. Each change takes effect at once.
3. Select Done.

Delete a Group

1. Select the bin next to the Group.
2. Select Delete.

Its members lose the Rights of its Roles at once. Their own Roles, and their other Groups, stay.

You can’t give more Rights than you hold

If you don’t hold the Right to manage Roles and Rights, you may only add members to Groups, and give Groups Roles, whose Rights you hold yourself. This keeps anyone from gaining more Rights through managing Groups than they have.

Your Tenant always keeps someone who can manage Roles

The Admin App refuses any change to a Group that would leave your Tenant without an active user who holds the Right to manage Roles and Rights: removing that user from the last Group that gives them the Right, taking the Role from the Group, or deleting the Group. Give the Right to another active user first.

Where a user’s Rights come from

On the Users page, open Effective Rights under a user to see each Right they hold and where it comes from: one of their own Roles, or a Role of one of their Groups. On the Roles page, each Role names the Groups it is given to.

Every change to a Group is recorded in your Tenant’s Audit Log, with who made it and which Group, member, Roles and Rights it concerned. Group names aren’t recorded.