Skip to main content
User groups allow you to organize users and manage access collectively. Instead of assigning user attributes to individual users, you can add users to groups for easier management at scale. Access policies can be configured based on groups to control row-level security.

​
Creating groups

To create a user group:
  1. Navigate to Admin → User Groups
  2. Click Create Group
  3. Enter a group name and optional description
  4. Add users to the group
User Groups interface

​
Assigning roles to groups

Assigning roles to groups is currently in preview, and the user experience may still change. Reach out to the Cube support team to activate this feature for your account.
Open a group and use the Roles section to assign roles to it. Every member of the group gains the access that role grants, and removing the role from the group revokes it from all members immediately. Roles only ever add permissions — there is no precedence and no deny. A user with a Viewer role who belongs to a group assigned Developer holds both, and is effectively a Developer. This includes Admin: anyone who can edit a group’s roles can grant administrative access through it. The Effective access section on a user’s page lists the roles a user holds directly and the roles conferred by a group, with the group named.