Manage group memberships

You can add or remove users from groups to control the permissions they inherit through group membership.

Automation orchestrator applies group membership changes on the next token refresh. When you add a user to a group, that user inherits all role assignments and policy grants for the group.

You can manage memberships from two places: the Groups tab on a user's profile, or the member list on a group's detail page.

The authenticated group is implicit for all logged-in users. You cannot modify it.

Add a user to a group

Add a user to a group to grant the user all permissions assigned to that group.

Procedure

  1. Navigate to System Administration > Access Management > Users.
  2. Select the user.
  3. Select the Groups tab.
  4. Select Add to group.
  5. Search for and select a group.
  6. Select Add.

Remove a user from a group

Remove a user from a group to revoke any permissions that the group grants.

Procedure

  1. On the user detail page, select the Groups tab.
  2. Select the actions menu for the group you want to remove.
  3. Select Remove member.
  4. In the confirmation dialog, select Remove to confirm.

Results

The authenticated group is implicit for all users and cannot be removed.