20 lines
1.5 KiB
Markdown
20 lines
1.5 KiB
Markdown
# User groups
|
||
All users in Sentri are assigned to a user group. There are currently two types of user groups:
|
||
|
||
- **Administrator** – Users not tied to specific companies. They are responsible for administering Sentri and are created [[Admins|here]].
|
||
- **User** – Intended for future use for users linked to specific companies. This group type is not yet active in Sentri.
|
||
|
||
## User group weight
|
||
Each user group has an associated **weight**, which is used to enforce hierarchy and prevent privilege escalation.
|
||
|
||
For example, if your current user group has a weight of **10**, you cannot create or assign a user to a group with a lower weight (e.g. **1**) if that would result in higher permissions than your own. This ensures users cannot create accounts with greater access than their own.
|
||
## Adding a user group
|
||
To add a user group, you need the `admin-access-control-user-groups` RW permission.
|
||
|
||
Navigate to **Access Control** > **User groups** and click **Add user group**. Enter a name and select the group type.
|
||
|
||
After creation, you will be able to configure the group’s [[Permissions|permissions]]. To modify permissions, you also need the `admin-access-control-permissions` **RW** permission.
|
||
## Viewing user groups
|
||
To view user groups, you need the `admin-access-control-user-groups` RO permission.
|
||
|
||
Go to **Access Control** > **User groups** and click the **view icon** next to a user group. This will show detailed information about the group, including all configured [[Permissions|permissions]]. |