Manage groups

Groups organize users into logical collections, making it easier to assign roles to many users at once. When you assign a role to a group, every user in that group inherits its permissions.

Table 1. Built-in groups
Group Description
admins Built-in administrators group
authenticated Built-in group for all authenticated users
auditors Read-only access with audit log visibility
users Standard users with access to create and manage own resources

You cannot edit or delete built-in groups.

Create a group

Create a group to organize users and assign shared permissions through role assignments.

Before you begin

  • You have group:create permission.

Procedure

  1. In the automation orchestrator UI, navigate to System Administration > Access Management > Groups.
  2. Select Create group.
  3. In the Create group modal, enter the following information.
    • Group name: Enter a unique name for the group (maximum 255 characters).
    • Description: Optional: Enter a description for the group (maximum 2000 characters).
  4. Select Create group.

Results

A success alert confirms "Group group_name has been created successfully." The new group is displayed in the groups list.

Edit a group

Edit a group to update its name or description. You cannot edit built-in groups.

Before you begin

  • You have group:update permission.

Procedure

  1. Navigate to System Administration > Access Management > Groups.
  2. From the groups list, do one of the following.
    • Select the Options menu (⋮) for the group row, and select Edit group.
    • Select the group name to open the Details tab, and select Edit group.
  3. In the Edit group modal, modify the following fields as needed.
    • Group name: Update the name for the group (maximum 255 characters).
    • Description: Update the description for the group (maximum 2000 characters).
  4. Select Save.

Results

A success alert confirms "Group group_name has been updated successfully." The updated information is reflected in the groups list and the group detail page.

Delete a group

Delete a group to remove it from automation orchestrator. You cannot delete built-in groups.

Before you begin

  • You have group:delete permission.

About this task

Deleting a group removes all role assignments associated with that group. Users who were members lose any permissions granted through that group membership.

Procedure

  1. Navigate to System Administration > Access Management > Groups.
  2. Select the Options menu (⋮) for the group you want to delete.
  3. Select Delete group.
  4. In the confirmation dialog, select the I understand this group will be permanently deleted checkbox.
  5. Select Delete.

Results

The group is removed from the groups list.