You can assign roles to groups as well as individual users. For more information, see Group roles. For information on administrator roles, see Roles. Assign roles to administrator groups rather than end-user groups to manage permissions.

  1. Go to Directory > Groups.
  2. Click an existing group entry to open the details panel, or create a new group.
  3. Click the Roles tab.
  4. Do one or more of the following.

    Add a role

    To add roles to the group, click Grant roles. Select or clear the appropriate responsibilities. To see all responsibilities, click Available responsibilities. To see only the currently assigned responsibilities, click Granted responsibilities. You can assign groups more than one role. For information on administrator roles, see Roles.


    Click Select all or Remove all to select or clear all available responsibilities.

    Reduce access for a responsibility

    You can choose to grant fewer responsibilities than your current user account has. Use this feature to limit the group’s access to a particular environment or population.

    Click the funnel icon, and then select or clear the appropriate environments or populations.

    Remove a role

    Locate the role that you want to remove, and then clear the check box for that role.

  5. Click Save.

For information about role assignment using external groups, see Managing administrator roles using external groups.