Groups

Groups are collections of users with shared permissions. Instead of assigning permissions to individual users, you assign them to groups.

Creating a Group

Navigate to Organization Settings > Groups
Click Create Group
Enter a name (e.g., "Backend Team")
Add permissions
Save

Adding Members

Open the group
Click Add Member
Select users from your organization
Save

Users immediately receive all permissions from the group.

Removing Members

Open the group
Find the user in the members list
Click Remove

Permissions are revoked immediately.

Protected Groups

Some groups are protected and can't be deleted:

Organization Admins - Users with full organization control. Every organization has at least one admin.

Group Permissions

Groups can have permissions at multiple levels:

Group: "Platform Team"
Permissions:
  - org:member                    # Can view org settings
  - project:web-app:admin         # Full control of web-app project
  - project:mobile-app:admin      # Full control of mobile-app project
  - env:production:member         # Read-only on all production environments

Best Practices

Group by role, not project. Create groups like "Developers", "QA", "Ops" rather than "Project-A-Team", "Project-B-Team".

Least privilege. Give groups the minimum permissions they need. You can always add more.

Use environment-level permissions. Instead of project-admin, consider environment-specific access:

Group: "Developers"
  - env:development:admin
  - env:staging:admin
  - env:production:member  # Can view, not modify

Document your groups. Include descriptions so new team members understand the purpose of each group.

Example Setup

Small team:

Group: "Admins"
  - org:admin

Group: "Developers"
  - org:member
  - project:*:admin

Larger team:

Group: "Organization Admins"
  - org:admin

Group: "Backend Team"
  - org:member
  - project:api:admin
  - project:workers:admin

Group: "Frontend Team"
  - org:member
  - project:web-app:admin
  - project:mobile-app:admin

Group: "Production Ops"
  - env:production:admin (all projects)

Group: "QA"
  - org:member
  - env:staging:admin (all projects)