Groups

Organize users and assign permissions

Groups are collections of users with shared permissions. Instead of assigning permissions to individual users, you assign them to groups.

Creating a Group

  1. Navigate to Organization Settings > Groups
  2. Click Create Group
  3. Enter a name (e.g., "Backend Team")
  4. Add permissions
  5. Save

Adding Members

  1. Open the group
  2. Click Add Member
  3. Select users from your organization
  4. Save

Users immediately receive all permissions from the group.

Removing Members

  1. Open the group
  2. Find the user in the members list
  3. Click Remove

Permissions are revoked immediately.

Protected Groups

Some groups are protected and can't be deleted:

Organization Admins - Users with full organization control. Every organization has at least one admin.

Group Permissions

Groups can have permissions at multiple levels:

Group: "Platform Team"
Permissions:
  - org:member                    # Can view org settings
  - project:web-app:admin         # Full control of web-app project
  - project:mobile-app:admin      # Full control of mobile-app project
  - env:production:member         # Read-only on all production environments

Best Practices

Group by role, not project. Create groups like "Developers", "QA", "Ops" rather than "Project-A-Team", "Project-B-Team".

Least privilege. Give groups the minimum permissions they need. You can always add more.

Use environment-level permissions. Instead of project-admin, consider environment-specific access:

Group: "Developers"
  - env:development:admin
  - env:staging:admin
  - env:production:member  # Can view, not modify

Document your groups. Include descriptions so new team members understand the purpose of each group.

Example Setup

Small team:

Group: "Admins"
  - org:admin

Group: "Developers"
  - org:member
  - project:*:admin

Larger team:

Group: "Organization Admins"
  - org:admin

Group: "Backend Team"
  - org:member
  - project:api:admin
  - project:workers:admin

Group: "Frontend Team"
  - org:member
  - project:web-app:admin
  - project:mobile-app:admin

Group: "Production Ops"
  - env:production:admin (all projects)

Group: "QA"
  - org:member
  - env:staging:admin (all projects)

On this page