---
url: 'https://docs.codatum.com/workspace/administration/group.md'
description: A unit for granting permissions to a group of users
---

# Group (Optional feature)

A group is a unit for managing multiple users together and granting them access to resources in bulk. Manage groups from [global nav](../../guide/screen-layout) > **Workspace settings** > **Groups**.

A user can belong to multiple groups. Permissions granted to a group are inherited by its [members](./user#member-and-guest) and its [Group Owners](#group-owner). For how permission evaluation works, see [Permissions overview](../../permissions/overview).

::: tip
This is an **optional feature**. Depending on your contract, it might not be available.
:::

## Creating and managing

1. Open [global nav](../../guide/screen-layout) > **Workspace settings** > **Groups**.
2. From **New group**, specify the **group name** and **members**.
3. Select **Edit** on a row in the list to open **Group settings**.

**Group settings** lets you check and manage the following.

* **Group name** / **icon**
* **Group Owners**
* **Group members**
* **Granted permissions** (connection / teamspace / notebook / report)

You can also add members from the following entry points.

* **Add to group** in [global nav](../../guide/screen-layout) > **Workspace settings** > **Users**
* Specifying a group during email invitations in [Invitations and joining](./invite#email-invite)

## Required roles {#required-roles}

For the roles required to create and manage groups, and which resource roles can be granted, see [Group permissions](../../permissions/resources/group).

## Group Owner {#group-owner}

A **Group Owner** can edit the target group and manage its members even without being a Workspace Owner. Permissions granted to a group are also granted to its Group Owners.

* A group can have up to 3 owners ([Fixed limits and constraints](../../reference/limits#fixed-limits)).
* A group can also operate without any owners (zero is allowed).

## Granting permissions

Permissions are granted to a group mainly through the sharing and permission settings of each resource. The typical label when selecting a target is **Add group or member**.

Examples of resources you can grant permissions on:

* [Connection](../../permissions/resources/connection)
* [Teamspace](../../permissions/resources/teamspace)
* [Notebook](../../permissions/resources/notebook)
* [Report](../../permissions/resources/report)

**Granted permissions** in the group settings lets you check permissions that have already been granted. For connections and teamspaces, you can sometimes change the role from here too (only a Workspace Owner can make the change).

## Automatic assignment by allowed domain {#auto-assign-by-domain}

Automatically assigning a group by email domain is set up not on the group screen, but under [global nav](../../guide/screen-layout) > **Workspace settings** > [**General**](./basic) > **Allowed domains**. You can specify a **default group** for each domain.

For the join flow and constraints, see [Invitations and joining](./invite#allowed-domains).

## Constraints

* A [Workspace Guest](./user#member-and-guest) can't belong to any group.
* You can check the maximum number of groups from global nav > **Workspace settings** > **Usage** ([Fixed limits and constraints](../../reference/limits#plan-limits)).