About user groups
User groups are a collection of users that share similar functions or roles in an organization. Groups make it much easier to manage members and their access requirements.
For example, create a group of users who only need access to datasets and projects and another group of users who have access to catalog resources. Any new user who gets added to the organization can then be added to these groups and they automatically get access to the resources that the group is authorized to access.
Important
Note that user groups are not discoverable outside of an organization. When users outside the organizations want to share resources with an organization, they can share the resources with the organization or with specific users in the organization, but they cannot share them with user groups in the organization.
Out-of-the-box groups
Three standard user groups are automatically created in each organization. The system allows changing access level of the All Members user group only and does not allow deleting the out-of-the-box groups. You can always add and remove users from these groups.
If the out-of the-box user groups access levels work for you, you can just add users to these groups and start using the application. Create custom groups for configuring custom access levels to resources.
The following table presents three standard user groups along with their respective access levels in relation to a specific access areas.
Access areas | User groups | ||
---|---|---|---|
All members | Authors | Admins | |
Dataset and project access | No access | Contribute | Manage |
Catalog access | No access | Edit | Manage |
Organization administration | No access | No access | Manage |
For a comprehensive understanding of the permissions and access levels assigned to each group, go to the Planning user groups and their access levels page.
All members: Every member of the organization is automatically added to this group. By default, this group of users does not have access to view any catalog resources or datasets and projects. They can only access datasets and projects that are shared with the organization or are set as Discoverable. The access level of this group can be adjusted to align with your business needs.
Important
Removing a member from the All members group is the same as removing the member from the organization.
Caution should be used while setting the access levels of the All members group as every new member of the organization automatically gets the access assigned to this group.
Authors: Users in this group are automatically authorized to add new projects and datasets and new catalog resources in the organization. The access level of this group cannot be changed.
Organization admins: This is a group of users who have manage access to all datasets, projects, and catalog resources in the organization and they can manage organization settings, billing, and member groups. You should add selective users in this group.
Important
There must always be at least one member in this group.
The access level of this group cannot be changed.
An overview of user permissions
The following table provides a high-level overview of the actions users with different permission levels can perform on the platform. For detailed information about these permissions, see Planning user groups and their access levels