Group overview

A group is an organizational entity that contains users with common corporate characteristics and Connected requirements. For example, a group might be a corporate location (Boston, London) or department (Engineering, Sales). Using groups to organize users lets you easily assign policies to and generate reports about different sections of your user base.

Your Connected environment comes with at least one predefined group. Many environments, however, contain two:

  • ADMIN. Top-level group that holds all customer-level administrators (users with Admin or Data Admin roles).

    Customer-level administrators have the highest-ranking roles in your company. Therefore, group-level administrators cannot perform certain administrative tasks on them, such as edit their profile, move them to a different group, or move the group in which they belong. To prevent issues that might result from groups containing both customer-level and group-level administrators, it is strongly recommended that you place all customer-level admins in the ADMIN group—outside the span of administrative control of lower ranking group-level admins.

  • DEFAULT. Initial top-level group that holds all other types of users and is configured as your company's default group.

Although you can assign users to one of the predefined groups, creating additional groups lets you more precisely organize and manage user permissions through policies. A single group can contain any number of immediate subgroups. However, to ensure optimal system performance, limit the overall depth of nested groups in your hierarchy to 50 levels. For examples of how groups can help organize your Connected user base, see Group hierarchy examples.