Groups

Check which IAM groups you or another user belong to, which roles each group grants and, if you have edit permission, attach roles to a group or detach them.

Open Groups in Admin →

Check your IAM groups

1. In the side menu, open AuthN › Groups. The Groups tab opens.
2. The IAM Groups of: table shows your user’s groups, with their roles.
3. Expand a row with › to see the group’s ID, name, email, other aliases and direct members.

To narrow the list, use the Group, Name and Relation type filters, and Clear filters to remove them. In the ROLES column, +N means the group has more roles than fit.

Search for a group or another user’s groups

1. Press Advanced search.
2. In Search type, choose BY IAM GROUP or BY USER.
3. Type the group name in Search IAM group, or the user’s email in Search by IAM user email.
4. Press Search.

To go back to your list, press Back to my IAM groups. The search stays in the page address, so you can share the link.

Attach or detach roles

1. Open the ⋮ menu of the group’s row and choose Attach roles.
2. In ATTACH ROLES, the left column lists the available roles and the right one, ATTACHED ROLES, the roles the group already has. Each column splits APPLICATION and DOMAIN roles.
3. Look for the role in Search roles.
4. Press ⊕ next to a role to attach it, or ⊖ in the right column to detach it.

Each change is saved at once: there is no save button. You see “The role … has been attached” or “The role … has been detached”.

To copy the roles of another group, open View all roles and choose that group: the left column then shows only its roles.

Without admin.authn_groups.write, the ⋮ menu shows View group, which opens the same screen read-only, with the attached roles only.

The screenshots show the Admin interface in Spanish.

When something is not as expected

Reference

Table columns:

Row detail: ID, Name, Email, Other aliases and Direct members.

Group data on the assignment screen: GROUP, NAME, DESCRIPTION, ID, EMAIL and OTHER ALIASES.