Skip to main content
Users and Groups

Create a Group and Assign Permissions

Step-by-step guide: create or change a group in octoja, assign its permissions, and add members.

Create a group, set its permissions, and add members. Every member gets everything the group grants. Which permissions exist and how they work together with customer and device access is explained in How Users, Groups & Permissions Work.

Prerequisites

  • You need the Group Management permission.
  • The users you want to add already exist — see Create a User.

Warning: Grant User Management and Group Management only to trusted instance administrators. These permissions apply to the entire octoja instance, even with restricted customer and device access. With Group Management, members can expand their own access. The permission overview explains these administrative powers.

Steps

  1. Go to Administration → Groups in the left sidebar.
  2. Click Add Group.
  3. Enter a name for the group — for example, "Technicians" or "Help Desk" — and click Add. You land on the new group's edit page.
  4. On the General tab, turn on the Administrator group toggle if this is a full-access group. It then receives new permissions from future updates automatically and reaches the areas reserved for administrator groups.
  5. In the Members section, tick every user who should belong to the group.
  6. On the Permissions tab, set the access level for each row. Read & write includes Read; indented rows such as Manage Patch Cycles can only be set once the row above them is set.
  7. On the Customer Access and Device Access tabs, choose which customers and devices members reach — see Restrict a Group's Customer and Device Access. A new group reaches no customers and no devices until you do.
  8. Click Save.

The user list under Administration → Users shows each user's groups so you can check the result at a glance.

Change an existing group

You change an existing group's permissions and members on the same page: open the group under Administration → Groups, adjust the tabs as in steps 4–7, and click Save. Clearing a tick under Members removes that user from the group.

Warning: Only Group Management is protected from being removed from the last user who holds it. A change can remove other permissions, such as User Management, even from the last user who holds them.

Next step

Restrict a Group's Customer and Device Access

Was this helpful?

Still need help? Ask the team