Benefits of access groups
- Precision: Assign exact scopes without unintentionally broadening access, ensuring users have only the permissions they need.
- Reusability: Create groups once and reuse them across multiple users or scenarios, saving time and reducing errors.
- Scalability: Efficiently manage permissions even as your organization expands, keeping processes streamlined and consistent.
Access groups definition
Access Groups simplify user and permission management by enabling admins to define precise scopes and assign them flexibly. This feature supports both entity-based and rule-based selection methods, allowing for effective and reusable access management without cluttering the organizational structure.
Key features
- Entity selection or rule-based scopes: Create access groups by directly selecting entities or using the Advanced selection feature to define rules based on global or custom attributes.
- Search and select: Add specific entities to complement rule-based selections using the search and select functionality.
- Flexibility: Combine rule-based scopes and selected entities without duplication or overlap.
- Reusability: Create groups once and use them across multiple users or situations, simplifying the assignment process.
Manage access groups
1. Create a new access group
- Navigate to the Users page and select the Access Groups tab.
- Click on Add Access Group.
- Provide a unique name for your access group.
2. Define the group
Choose between:
-
- By entity: Select specific entities directly with a search and select functionality.
- Advanced selection: Use global or custom attributes to define rule-based scopes. Example: “Scale: Economy AND Country: Germany” resulting in all the entities in Germany that are in the Economy scale.
- Use the Additional entities section to add more entities with the search and select feature, complementing your advanced selection.
3. Save the access group
- Once saved, you can view and search for the users assigned to it.
4. Assign access groups
- During user invitations or editing a user of your organization, select predefined access groups to easily assign specific scopes.
5. Manage access groups
- Edit, update, or delete access groups as needed.
- Note: Groups currently in use cannot be deleted to maintain active permissions.
Important considerations
- Combining unrelated rules (e.g., "Ibis in France AND Mercure in Spain") is currently unsupported.
- Access groups are part of an enhanced access management system and operate independently of segments.
FAQs
1. Who can use access groups?
Access groups are available to Enterprise and Travel Services admins.
2. How do rule-based attributes work?
Rules combine:
- Intersection (AND): Global or custom attributes must all match (e.g., "Scale: Luxury AND Country: France").
- Union (OR): Additional entities are included as exceptions.
3. What happens if an entity is removed from the organization?
Access groups automatically update to reflect the current availability of entities, ensuring accurate permissions.