Managing Users and Groups
User Management
From the sidebar, administrators can access the Users section to:- View all members in the organization
- Create new users
- Manage user statuses
- Edit user details and group assignments
Group Management
Groups are the primary way to organize users and control access:1
Create Groups
Administrators can create groups that represent teams, roles, or access levels (e.g., engineering, sales, admin)
2
Assign Users
Users can be assigned to one or multiple groups:
- Click the Edit button next to a user
- Add or remove groups from the user’s profile
- Save the changes
Controlling Resource Access
Use the Access Control section to manage which user groups can access each resource role.1
Open Access Control
In the Web App sidebar, under Discover, click Access Control.
2
Pick or create a group
Find the user group you want to manage, or click Create Group to add one.
3
Assign resource roles
Click Configure next to the group and select the resource roles that group can access.
Access Control governs which groups can reach a resource role. To require approval before access — time-based or per-command — set up an Access Request rule instead.
Access Modes
Access modes are configured per resource role, in that resource role’s own configuration (when you create or edit it) — not in the Access Control section. They control how users interact with the resource role:Runbooks
Create templates to automate tasks in your organization
Native Access
Allow access through Command Line Interface
Web and One-offs
Enable access through the developer portal and CLI commands
Best Practices
Principle of Least Privilege
Grant users only the access they need for their role
Group Organization
Create groups based on teams and responsibilities
Regular Audits
Periodically review group memberships and access permissions
Access Monitoring
Use session monitoring to track and audit resource role usage
Next Steps
Monitoring Sessions
Learn how to track and audit resource role usage
Access Requests
Configure approval workflows for secure access