Grant and revoke access from groups
Manage access to projects using groups.
Read time 2 minutesLast updated 7 days ago
To manage groups' project membership:
- In Unity Dashboard, go to Administration > Projects.
- Open a project.
- Go to the Members tab.
Note
Group-based access is available only at the project level (although groups are managed at the organization level).
Add or remove a group from a project
Use the Members tab to add and remove user groups from a project.
Add a group
Add a group to the project to give the group's users access to the project.
- In the Members tab, select Add groups.
- In Groups, select up to five groups. There's no limit to how many groups a project can have, but you can only add five groups in each process. If you need to add more than five groups, repeat the Add process as needed.
- Select a user type for the group:
- User: This is the recommended user type; its permissions are more limited than the Owner type.
- Owner: Assign this only to group members that need full permissions. For more information, refer to Change group access.
- Select Add to project.
After confirmation, the group appears in the project members list. Each member's user type appears as Based on group unless their organization user type is higher than the one assigned to the group.
Note
Once a group has a user type, you can provide fine-grain access control with roles.
Remove a group
Remove a group from the project to revoke user's access to the project.
- In the Members tab, select Manage roles (…) next to the group you want to update.
- Select Remove group from project.
- Review the confirmation message.
- Select Remove to confirm.
Change group access
Group access is determined by two settings: user type and roles.
To change group access, in the Members tab, select Manage roles.
User type
A group with an assigned user type is a member of the project. The user type controls the group's administrative level in the project.
To change a group's user type:
-
Select Manage roles (…) > Edit user type in project.
-
Select a user type:
- : Default user type with no administrative permissions.
User - : Full project access.
Owner
-
Select Save.
Changing user type immediately affects all group members.
Roles
Roles provide service-specific permissions in the project. You can only assign roles to a group that already has a user type.
-
Select Manage roles (…) > Edit roles in project.
-
Select the roles you want to assign. For more information, refer to Asset Manager roles or Automation roles.
-
To remove all roles for a specific service, expand the list of roles and select Clear selection.
-
Select Save.
Changing roles immediately affects all group members.
Roles granted through a group have the tag Project group in the Roles column of the members list.