Access Groups Administration

Access groups let administrators define a named permission profile and assign multiple users to it. This page covers governance and operational management of groups from an admin perspective.

Creating a group

1. Go to Admin → Access control groups.
2. Select New group.
3. Set the group name, scope (project or organization), and role.
4. Add initial members.
5. Save.

Group scope

Scope	Behaviour
Project	Applies only within the specified project.
Organization	Available across all projects; member inherits the role on each project they are active on.

Assigning permissions

Groups are assigned a Workflows role. All members inherit that role's permissions. You cannot create a group with higher permissions than your own admin level.

Adding and removing members

Open the group and use Edit members. Changes take effect immediately. Removed members revert to any individually assigned role they hold; if none, they lose access.

Governance recommendations

• Review group membership at project milestones, staff changes, and phase completions.
• Document the purpose of each group in the group description field.
• Avoid creating overlapping groups for the same discipline to keep the permission model predictable.
• Archive (do not delete) groups that are no longer active to preserve audit history.

Auditing group changes

All group membership changes are logged in the organization audit trail. See Audit trail for how to retrieve this log.