Dan HeathandRobin Beck
5ce6515156
* docs: IA reorganization * docs: Updates * docs: Updates * docs: Fix links * docs: Updates * docs: Fix a typo * docs: Fix client agent topic * docs: Update Client Agent nav * docs: Fix conflict * docs: Fix a typo in Client Agent docs (#5853) * docs: Fix client agent topic * docs: Updates * docs: Updates * docs: Updates * docs: Updates * docs: Fixes get started and operations links * docs: Update nav * docs: Partials * docs: Unix partials * docs: Worker partials * docs: Updates * docs: Update workers and targets * docs: Updates * docs: Updates * docs: Fixes link * docs: Updates after sync review * docs: Updates from review feedback * docs: Move worker filter examples * docs: Fix links * docs: Updates for filters based on working session * docs: Fixes broken links * docs: Add links to other filter topics * docs: Update list intro * docs: Adds link * docs: Fixes redirects * docs: Fixes redirects * docs: Deleted mysql page from TOC * docs: Add versioned redirect * docs: Adds versioned redirects * docs: Adds versioned redirects * docs: Update redirects * docs: Update redirects * docs: Redirect fixes * docs: Update redirect format * docs: Fix a typo * docs: Fixes redirects * docs: Fixes redirect * docs: Adds links out to client agent troubleshooting * uses /etc/boundary.d/ as recommended installation directory (#6003) * docs: Updates legacy io links * docs: Fixes redirects * docs: Fix redirect * docs: Restoring deleted file --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
58 lines
1.8 KiB
Plaintext
58 lines
1.8 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: Group resource
|
|
description: >-
|
|
Learn about using the group resource to create collections of users with the same access control. Any role assigned to a group is assigned to the group's users.
|
|
---
|
|
|
|
# Groups
|
|
|
|
A group is a resource
|
|
that represents a collection of [users][]
|
|
which can be treated equally
|
|
for the purposes of access control.
|
|
A group is a principal
|
|
which allows it to be assigned to [roles][].
|
|
Any role assigned to a group is indirectly assigned to the users in the group.
|
|
This assignment is a transitive property.
|
|
A user in a group receives all [permissions][] of the roles assigned to the group.
|
|
Groups can be defined at the [global][], [organization][], or [project][] [scope][].
|
|
|
|
## Attributes
|
|
|
|
A group has the following configurable attributes:
|
|
|
|
- `name` - (optional)
|
|
If set, the `name` must be unique within the group's immediate parent scope.
|
|
|
|
- `description` - (optional)
|
|
|
|
## Referenced by
|
|
|
|
- [Global][]
|
|
- [Organization][]
|
|
- [Role][]
|
|
- [User][]
|
|
|
|
[global]: /boundary/docs/domain-model/scopes#global
|
|
[group]: /boundary/docs/domain-model/groups
|
|
[groups]: /boundary/docs/domain-model/groups
|
|
[organization]: /boundary/docs/domain-model/scopes#organizations
|
|
[permissions]: /boundary/docs/rbac
|
|
[project]: /boundary/docs/domain-model/scopes#projects
|
|
[role]: /boundary/docs/domain-model/roles
|
|
[roles]: /boundary/docs/domain-model/roles
|
|
[scope]: /boundary/docs/domain-model/scopes
|
|
[user]: /boundary/docs/domain-model/users
|
|
[users]: /boundary/docs/domain-model/users
|
|
|
|
## Service API docs
|
|
|
|
The following services are relevant to this resource:
|
|
|
|
- [Group service](/boundary/api-docs/group-service)
|
|
|
|
## Tutorial
|
|
|
|
Refer to the [Manage Users and Groups with HCP Boundary](/boundary/tutorials/hcp-administration/hcp-manage-users-groups) tutorial to learn how to complete user management related tasks.
|