Manage Group Policies

This guide explains how to create groups and manage their policies for your RudderStack workspace.

Overview

The Groups tab lets you create groups, configure a group policy for each workspace, and add members to groups. All group members automatically inherit this workspace policy.

Groups enable the creation of custom roles (Data Engineers, Marketers, etc.) and streamline permissions configuration for large teams.

Plan-wise limits

The number of groups Admins can create in a workspace depends on the RudderStack plan:

See the Plan-wise Features guide for more details.

Add a new group

1. Go to Settings > Access Management.
2. Under the Groups tab, click Create group.

3. Assign a group name and description. Then, click Next.

4. Specify the workspaces that the group will be a part of.

5. Click Create to create the group.

Manage group members

You can easily add or remove members from a group to simplify permissions management.

Add members to a group

1. In the Groups tab, click the group to which you want to add members.
2. Go to the Group Members tab and click Add group members.

3. Select the members to add to the group. Then, click Next.

4. In the confirmation window, click Add members to add the members to the group.

Remove members from a group

1. In the Group Members tab, click the meatballs menu (...) next to the member. Edit members button.
2. Click Remove member from group.

3. In the confirmation window, click Remove to complete removal.

Configure group workspace policy

1. Go to Settings > Access Management and click the Groups tab.
2. Select the group for which you want to configure the policy.
3. In the Group Workspace Policies tab, select the workspace for which you want to configure the group policy.

4. Configure permissions for different resources and PII applicable to the group. All group members will automatically inherit these permissions.

You may see some permissions with a green check mark. These indicate permissions inherited from the Baseline Workspace Policy defined for the workspace.

As all groups inherit permissions from the baseline workspace policy, these inherited permissions cannot be changed or removed. However, you can configure additional permissions for the group.

5. Click Save for the changes to take effect.

A sample group workspace policy is shown below: