# Manage Group Policies


This guide explains how to create groups and manage their policies for your RudderStack workspace.

## Overview

The **Groups** tab lets you create groups, configure a group policy for each workspace, and add members to groups. All group members automatically inherit this workspace policy.

{{< info >}}
Groups enable the creation of **custom roles** (Data Engineers, Marketers, etc.) and streamline permissions configuration for large teams.
{{< /info >}}

### Plan-wise limits

The number of groups Admins can create in a workspace depends on the [RudderStack plan](https://www.rudderstack.com/pricing/) — see [Plan-wise Access Management Features]({{< ref "access-management/plan-wise-features.md#groups" >}}) guide for more details.

| Plan | Group limit |
| :--------- | :------- |
| Free | Not available |
| Growth | Limit of 3 groups per organization |
| Enterprise | Unlimited groups |

## Add a new group

1. Go to **Settings** > **Access Management**.
2. Under the **Groups** tab, click **Create group**.

{{< image src="images/access-management/create-group.webp" alt="Create group button in dashboard" >}}

3. Assign a group name and description. Then, click **Next**.

{{< image src="images/access-management/group-name-description.webp" alt="Group name and description" >}}

4. Specify the workspaces that the group will be a part of.

{{< image src="images/access-management/add-group-to-workspaces.webp" alt="Group workspaces" >}}

5. Click **Create** to create the group.

## Manage group members

{{< readfile "/includes/access-management/manage-members.md" >}}

## Configure group workspace policy

1. Go to **Settings** > **Access Management** and click the **Groups** tab.
2. Select the group for which you want to configure the policy.
3. In the **Group Workspace Policies** tab, select the workspace for which you want to configure the group policy.

{{< image src="images/access-management/group-policy-select-workspace.webp" alt="Select workspace to define group permissions" >}}

4. Configure permissions for different [resources]({{< ref "access-management/policies-overview.md#resource-permissions" >}}) and [PII]({{< ref "access-management/policies-overview.md#pii-permissions" >}}) applicable to the group. All group members will automatically inherit these permissions.

{{< info >}}
You may see some permissions with a green check mark. These indicate permissions inherited from the [Baseline Workspace Policy]({{< ref "access-management/baseline-workspace-policy.md" >}}) defined for the workspace.

As all groups inherit permissions from the baseline workspace policy, these inherited permissions **cannot** be changed or removed. However, you can configure **additional** permissions for the group.
{{< /info >}}

5. Click **Save** for the changes to take effect.

A sample group workspace policy is shown below:

{{< image src="images/access-management/sample-group-workspace-policy.webp" alt="Group permissions policy" >}}