Groups and share groups

Two kinds of group make roles easier to manage:

• A group is a set of people. A role granted to the group applies to every member of it.
• A share group is a set of previews. A role granted on the share group applies to every preview in it, so you can delegate a customer’s previews to the people who look after that customer.

Groups

Members & roles → Groups.

1. New group, with a name.
2. Add members. Adding someone hands them the group’s roles, so it needs the right to grant those roles.
3. Grant the group a role, workspace-wide or on a share group or preview, from a member’s page or with Invite (choose the group as the people).

A group that holds the Owner role cannot be deleted. Groups are managed by hand today; linking them to an identity provider is not available yet.

Share groups

Share groups in the sidebar (or Members & roles → Share groups). Everyone can see the share groups they have a role in.

1. New share group, with a name (needs Manage groups workspace-wide).
2. Add previews: from the share group’s page, from the new-preview wizard (Share group), or with Move to share group on the Previews list. Adding a preview needs Manage groups on the share group and Manage any preview on the preview.
3. Optionally, have it fill automatically with every preview that uses one agent’s hostnames.
4. Grant a role on the share group, for example Preview manager or Admin, to a person or a group.

The share group’s page lists its previews, their viewers, who administers it, and totals.

Delegation example

An agency shows each client its work in progress. Create a share group Acme, set it to fill with previews on the agent in front of Acme’s staging sites, and grant Acme’s account team Preview manager on it. Each of them can then invite and revoke viewers and extend or end any Acme preview, while having no say over other previews, agents or members.

Grants at a glance

Granted on	Applies to
The workspace	Everything the role allows, everywhere
A share group	The role’s scopable permissions, on every preview in the group
One preview	The role’s scopable permissions, on that preview

Which permissions are scopable: Members and roles.