Groups

All guides

Groups

Apply one set of sign-in rules to a whole team instead of editing every user.

Find it at Users → Groups
Groups in nCapsule View full size

A group is a set of users who share one set of sign-in rules — the same idea as an organisational unit in Google Workspace. Put someone in a group and the group's rules apply to them straight away; take them out and the rules stop.

Groups exist because a domain can hold only one version of each rule. If your contractors need a different country list from your staff, or support works nights while everyone else works nine to five, you cannot express that on the domain alone. A group can.

A user belongs to one group only

This is deliberate. With one group per person there is never a question about which rule wins when two groups disagree — so what applies to someone is always answerable at a glance. Adding a user to a second group moves them.

Creating a group
  1. 1 Go to Users → Groups and choose Add Group.
  2. 2 Give it a name and pick the domain it belongs to. A group cannot span two domains.
  3. 3 On the next screen, add members and set whichever rules that team needs.
Creating a group. A new group has no rules of its own, so adding people to it changes nothing until you set one. View full size
Creating a group. A new group has no rules of its own, so adding people to it changes nothing until you set one.

Each rule is optional. A group that says nothing about sign-in hours simply inherits the domain schedule — the same way a Google OU inherits from its parent. The panel at the top of the group page always shows which rules the group sets and which it inherits.

What actually applies to this group's members. Read this before changing anything — it is the quickest way to see where a rule is coming from. View full size
What actually applies to this group's members. Read this before changing anything — it is the quickest way to see where a rule is coming from.
Each rule on a group
Off — follow the domain
Members use the domain's setting. This is the default.
On — use the settings below
The group's own setting replaces the domain's for these members.
Adding people to a group with active rules
They are covered immediately — you do not need to change anything on their user record. If the group refuses sign-ins outside certain hours or countries, check those settings before you add a large team.
Users in no group are unaffected

Everyone starts in no group, and those users keep following the domain settings and their own user settings exactly as before. Deleting a group releases its members rather than deleting them.

Adding members. Only ungrouped users on this group's domain appear, because a user belongs to one group at a time. View full size
Adding members. Only ungrouped users on this group's domain appear, because a user belongs to one group at a time.