Skip to main content

Managing roles and permissions

Permissions are given through groups. Groups are managed in Management > Groups.

Creating a group​

  1. Go to Management > Groups and click New group.
  2. Enter a name, and optionally choose a template to prefill the permissions: admins, users, read-only, project contributor or project read-only. Without a template, the group starts with no permissions.
  3. Confirm, then configure the group as described below.

Configuring a group​

A group's page has three sections. Changes are only applied when you click Save.

Details​

The group's name and description.

Permissions​

  • Scopes: check the permissions the group has. Use Search scopes... to find one. Checking a parent, such as resources:*, checks all the scopes below it.
  • Projects: choose Permissions apply on all projects, or Permissions apply on selected projects and search for the projects to add.

Members​

Search for users to add them to the group. Select members and click Remove to remove them.

Common setups​

NeedSetup
A team that reads the data of its own projectsproject read-only template, with the team's projects selected.
A client or business unit that updates its own resourcesproject contributor template, with their projects selected.
An integration that only reads intelNo template, with the data:intels:read and data:intel-records:read scopes.
Security analysts who use everything but configure nothingusers template, on all projects.

Deleting a group​

Select groups in the list and click Delete. The admins group is read-only and cannot be deleted.