> ## Documentation Index
> Fetch the complete documentation index at: https://cubed3-igor-cub-2720-table-chart-docs-gap-pass.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# User groups
> Organize Cube Cloud users into groups and tie those groups to data access policies instead of managing every account in isolation.
User groups allow you to organize users and manage access collectively.
Instead of assigning [user attributes][ref-user-attributes] to individual users, you can add users to groups for easier management at scale.
[Access policies][ref-dap] can be configured based on groups to control [row-level security][ref-rls].
## Creating groups
To create a user group:
1. Navigate to **Admin → User Groups**
2. Click **Create Group**
3. Enter a group name and optional description
4. Add users to the group
## Assigning roles to groups
Assigning roles to groups is currently in preview, and the user experience may still
change. Reach out to the [Cube support team](/admin/account-billing/support) to activate
this feature for your account.
Open a group and use the **Roles** section to assign [roles][ref-roles] to it. Every member
of the group gains the access that role grants, and removing the role from the group revokes
it from all members immediately.
Roles only ever add permissions — there is no precedence and no deny. A user with a Viewer
role who belongs to a group assigned Developer holds both, and is effectively a Developer.
This includes Admin: anyone who can edit a group's roles can grant administrative access
through it.
The **Effective access** section on a user's page lists the roles a user holds directly and
the roles conferred by a group, with the group named.
[ref-user-attributes]: /admin/users-and-permissions/user-attributes
[ref-roles]: /admin/users-and-permissions/roles-and-permissions
[ref-rls]: /docs/data-modeling/access-control/row-level-security
[ref-dap]: /docs/data-modeling/data-access-policies