# Manage groups

> Manage groups - Learn about creating and deleting groups, adding users to groups, setting group
> permissions, and role-based access control (RBAC) for groups.

This Markdown file sits beside the HTML page at the same path (with a `.md` suffix). It summarizes the topic and lists links for tools and LLM context.

Companion generated at `2026-04-24T16:03:56.643938+00:00` (UTC).

## Primary page

- [Manage groups](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-groups.html): Full documentation for this topic (HTML).

## Sections on this page

- [Create a group](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-groups.html#create-a-group): In-page section heading.
- [Add users to a group](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-groups.html#add-users-to-a-group): In-page section heading.
- [Delete groups](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-groups.html#delete-groups): In-page section heading.
- [Configure group permissions](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-groups.html#configure-group-permissions): In-page section heading.
- [RBAC for groups](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-groups.html#rbac-for-groups): In-page section heading.
- [Manage execution environment limits](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-groups.html#manage-execution-environment-limits): In-page section heading.

## Related documentation

- [Account management](https://docs.datarobot.com/en/docs/platform/index.html): Linked from this page.
- [Administrator's guide](https://docs.datarobot.com/en/docs/platform/admin/index.html): Linked from this page.
- [Manage entities](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/index.html): Linked from this page.
- [Membership](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-users.html#manage-groups-and-organization-membership): Linked from this page.
- [restricted](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-orgs.html#restrict-orgs): Linked from this page.
- [role and access definitions](https://docs.datarobot.com/en/docs/reference/misc-ref/rbac-ref.html): Linked from this page.
- [sharing-based role permissions](https://docs.datarobot.com/en/docs/reference/misc-ref/roles-permissions.html): Linked from this page.
- [Custom Model Workshop](https://docs.datarobot.com/en/docs/classic-ui/mlops/deployment/custom-models/custom-model-workshop/index.html): Linked from this page.
- [Custom model environments documentation](https://docs.datarobot.com/en/docs/classic-ui/mlops/deployment/custom-models/custom-model-environments/custom-environments.html): Linked from this page.

## Documentation content

# Manage groups

**SaaS:**
> [!NOTE] Availability information
> Required permission: Org Admin

**Self-Managed:**
> [!NOTE] Availability information
> Required permission: Can manage users


## Create a group

Follow these steps to create a group:

**Saas:**
Expand the profile icon located in the upper right and click
APP ADMIN > Groups
. The displayed page lists all existing groups. From here you create, search, delete, and perform actions on one or more groups.
Click
Create a group
.
On the resulting page, enter a name and, optionally, description for the group.
When the information is complete, click
Create a group
. The new group appears in the
Manage Groups
listing, including parent organization (enterprise only), number of members, and group description.

**Self-Managed:**
Expand the profile icon located in the upper right and click
APP ADMIN > Groups
. The displayed page lists all existing groups. From here you create, search, delete, and perform actions on one or more groups.
Click
Create a group
.
In the resulting modal, enter a name and, optionally, description for the group. If you want to associate this group with an organization, select that organization. This will be the "parent organization" for the group.
Note
If a group is assigned a parent organization, the assignment cannot be removed.
When the information is complete, click
Create a group
. The new group appears in the groups listing, including parent organization (enterprise only), number of members, and group description.


## Add users to a group

**SaaS:**
Once a group is created, you add and remove one or more users from the Groups page. (After you configure a user's profile, you can also add or remove individuals from groups through their profile [Membership](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-users.html#manage-groups-and-organization-membership) tab.)

**Self-Managed:**
Once a group is created, you add and remove one or more users from the Groups page. (After you configure a user's profile, you can also add or remove individuals from groups through their profile [Membership](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-users.html#manage-groups-and-organization-membership) tab.)

In LDAP-authenticated deployments, users can be added to LDAP groups. When a user logs into DataRobot, if there is a DataRobot user group whose name matches the LDAP group they are a part of, that user is automatically added to the DataRobot user group.

> [!NOTE] Note
> If the group has a parent organization, you are [restricted](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-orgs.html#restrict-orgs) to adding only users already associated with that organization.


To add users through Manage Groups:

1. Open theManage Groups > All Groupspage. From the list of configured groups, click to select the group to add the user to.
2. When the profile opens, selectMembersto see all members in this group.
3. ClickAdd a user.
4. From the displayed page, type any part of the name of a user to add. As you type, DataRobot shows usernames containing those characters:
5. Select one or more users to add to the group. When done, clickAdd users.

The Members list for the group updates to show all members and information for each, including first name, last name, organization (if any), and status ( [active/inactive](https://docs.datarobot.com/en/docs/platform/admin/manage-entities/manage-users.html#deactivate-user-accounts) in DataRobot).

## Delete groups

You can delete one or more groups at a time. This removes the group profile only; members of that group continue to have access to DataRobot. Any projects shared with the deleted group are no longer shared with any users for that group. (If needed, re-share projects with individual users.)

1. View theGroupspage and do one of the following:
2. In the displayedConfirm Deletewindow, clickDelete group(s). Deleted groups are removed from the list of groups.

## Configure group permissions

You can configure permissions and apply them to all users in an existing group in addition to managing each user individually. This allows for easier tracking and management of permissions for larger groups.

> [!NOTE] Note
> Note that a user's effective permissions are the union of those granted to their organization, any user groups they are a member of, and permissions granted to the user directly.  A user who is added to a group obtains all permissions of that group. A user who is removed from a group does not maintain any permissions that were granted to them by that group. However, a user may still have the permissions granted by that group if the organization they belong to also grants those permissions.

1. To configure permissions for a group, select it from theGroupspage and navigate to thePermissionstab.
2. ThePermissionstab displays the premium products, optional products, preview features, and admin settings available for configuration for your group. Select the desired permissions to grant your group from the list.
3. When you have finished selecting the desired permissions for your group, clickSave Changes.

Once saved, all existing users in your group and those added to it in the future are granted the configured permissions. A user can view their permissions on the Settings page. Hover over a permission to see what group(s) or organization(s) enabled it.

## RBAC for groups

Role-based access (RBAC) controls access to the DataRobot application by assigning users roles with designated privileges. The assigned role controls both what the user sees when using the application and which objects they have access to. RBAC is additive, so a user's permissions will be the sum of all permissions set at the user and group level.

Assign a default role for group members in a group's Group Permissions page:

Review the [role and access definitions](https://docs.datarobot.com/en/docs/reference/misc-ref/rbac-ref.html) to understand the permissions enabled for each role.

> [!NOTE] Note
> RBAC overrides [sharing-based role permissions](https://docs.datarobot.com/en/docs/reference/misc-ref/roles-permissions.html). For example, consider a group member is assigned the Viewer role via RBAC, which only has Read access to objects. If this group member has a project shared with them that grants Owner permissions (which offers Read and Write access), the Viewer role takes priority and denies the user Write access.

## Manage execution environment limits

The execution environment limit allows you to control how many custom model environments a user can add to the [Custom Model Workshop](https://docs.datarobot.com/en/docs/classic-ui/mlops/deployment/custom-models/custom-model-workshop/index.html). In addition, the execution environment version limit allows you to control how many versions a user can add to each of those environments. These limits can be:

1. Directly applied to the user: Set in a user's permissions. Overrides the limits set in the group and organization permissions.
2. Inherited from a user group: Set in the permissions of the group a user belongs to. Overrides the limits set in organization permissions.
3. Inherited from an organization: Set in the permissions of the organization a user belongs to.

If the environment or environment version limits are defined for an organization or a group, the users within that organization or group inherit the defined limits. However, a more specific definition of those limits at a lower level takes precedence. For example, an organization may have the environment limits set to 5, a group to 4, and the user to 3; in this scenario, the final limit for the individual user is 3.

For more information on adding custom model execution environments, see the [Custom model environments documentation](https://docs.datarobot.com/en/docs/classic-ui/mlops/deployment/custom-models/custom-model-environments/custom-environments.html).

To manage the execution environment limits in the platform settings:

1. Click your profile avatar (or the default avatar) in the upper-right corner of DataRobot, and then, underAPP ADMIN, clickGroups.
2. To configure permissions for a group, select it from theGroupspage and then clickPermissions. ImportantIf you access theMemberstab to set these permissions, you are setting the permissions on an individual user level, not the group level.
3. On thePermissionstab, clickPlatform, and then clickAdmin Controls.
4. UnderAdmin Controls, set either or both of the following settings:
5. ClickSave changes.