73b6ef6a73
* basic procedural steps * more questions, more typos * more typos * tweaks * more content, new links * fixed link * tweak * fix things * more fixes * yet more fixes * Apply suggestions from code review Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com> * Update website/docs/users-sources/access-control/initial_permissions.mdx Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com> * dewi's edits * dominic's edits * gergo edits and more dominic edits * one more * yet one more fix * final gergo observation * tweak --------- Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com> Co-authored-by: Tana M Berry <tana@goauthentik.io> Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
60 lines
3.0 KiB
Plaintext
60 lines
3.0 KiB
Plaintext
---
|
|
title: Manage groups
|
|
description: "Learn how to work with groups in authentik."
|
|
---
|
|
|
|
A group is a collection of users. Refer to the following sections to learn how to create and manage groups, assign users and roles to groups, and how [permissions](../access-control/manage_permissions.md) work on a group level.
|
|
|
|
## Create a group
|
|
|
|
To create a new group, follow these steps:
|
|
|
|
1. In the Admin interface, navigate to **Directory > Groups**.
|
|
2. Click **Create** at the top of the Groups page.
|
|
3. In the Create box, define the following:
|
|
- **Name** of the group
|
|
- Whether or not users in that group will all be **super-users** (means anyone in that group has all permissions on everything)
|
|
- The **Parent** group
|
|
- Select **Roles** to apply to this group
|
|
- Any custom attributes
|
|
4. Click **Create**.
|
|
|
|
:::info
|
|
To create a super-user, you need to add the user to a group that has super-user permissions. All members of that group are super-users.
|
|
:::
|
|
|
|
## Modify a group
|
|
|
|
To edit the group's name, parent group, whether the group grants superuser permissions, associated roles, and any custom attributes, click the Edit icon beside the role's name. Make the changes and then click **Update**.
|
|
|
|
Starting with authentik version 2025.2, the permission to change super-user status has been separated from the permission required to change the group. Now, the `Enable superuser status` and `Disable superuser status` permissions are explicitly required to enable and disable the super-user status.
|
|
|
|
To [add or remove users](../user/user_basic_operations.md#add-a-user-to-a-group) from the group, or to manage permissions assigned to the group, click on the name of the group to go to the group's detail page and then click on the **Permissions** tab.
|
|
|
|
For more information about permissions, refer to [Assign or remove permissions for a specific group](../access-control/manage_permissions.md#assign-or-remove-object-permissions-on-a-group).
|
|
|
|
## Delete a group
|
|
|
|
To delete a group, follow these steps:
|
|
|
|
1. In the Admin interface, navigate to **Directory > Groups**.
|
|
2. Select the checkbox beside the name of the group that you want to delete.
|
|
3. Click **Delete**.
|
|
|
|
## Assign a role to a group
|
|
|
|
You can assign a role to a group, and then all users in the group inherit the permissions assigned to that role. For instructions and more information, see [Assign a role to a group](../roles/manage_roles.md#assign-a-role-to-a-group).
|
|
|
|
## Delegating group member management:ak-version[2024.4]
|
|
|
|
To give a specific role or user the ability to manage group members, the following permissions need to be granted on the matching group object:
|
|
|
|
- Can view group
|
|
- Can add user to group
|
|
- Can remove user from group
|
|
- Can access admin interface (for managing a group's user within the authentik Admin interface)
|
|
|
|
In addition, the permission "Can view User" needs to be assigned, either globally or on specific users that should be manageable.
|
|
|
|
These permissions can be assigned to a [Role](../roles/index.md) or directly to a [User](../user/index.mdx).
|