Groups

Groups allow you to organize users into logical collections for easier permission management. Instead of assigning permission sets to individual users, you can assign them to a group, and all members of that group automatically receive the access.

Groups List

The Groups page displays a paginated table of all groups in your organization.

Available Actions

From the Groups section, you can perform the following operations:

Action	Description	Link
Create Group	Create a new group	Create Group
Delete Group	Remove a group	Delete Group
Manage Members	Add or remove users from a group	Manage Members

Why Use Groups?

Groups simplify access management in several ways:

• Scale -- Assign a permission set once to a group instead of to each user individually.
• Consistency -- All group members get the same access, reducing the risk of configuration drift.
• Onboarding -- New team members only need to be added to the right groups to get all necessary access.
• Offboarding -- Removing a user from a group immediately revokes the group's access.

tip

Design your groups around teams or job functions. For example, create groups like "Engineering", "Finance-ReadOnly", or "DevOps-Admin" that map to your organization's access patterns.

---

Create Group

Create a new group to organize users and simplify permission set assignments. Groups serve as the building block for scalable access management in Prism.

Step-by-Step Guide

1. Navigate to Admin Portal > Groups from the sidebar.
2. Click the Create Group button at the top of the groups table.
3. Fill in the group details:

• Group Name -- Enter a unique, descriptive name for the group.
• Description -- Optionally, enter a description explaining the group's purpose.

4. Click Create to create the group.

Field Reference

Field	Type	Required	Description
Group Name	Text	Yes	A unique name for the group. Used to identify the group across Prism and AWS.
Description	Text	No	An optional description of the group's purpose. Helps other admins understand what the group is for.

tip

Use clear, descriptive group names that indicate the group's purpose or the team it represents. For example: Engineering-ReadOnly, DataScience-PowerUser, or Security-Admin.

What Happens Next

After creating a group:

1. The group is created in Prism's database with zero members.
2. The group appears in the Groups list.
3. You can now add members to the group.
4. You can create assignments that target the group.

info

A group with no members or assignments has no practical effect. After creating a group, add members and create assignments to make it operational.

---

Delete Group

Remove a group from your Prism organization. Deleting a group removes all member associations and revokes any permission set assignments that were made to the group.

Prerequisites

• The group you want to delete must already exist.

Step-by-Step Guide

1. Navigate to Admin Portal > Groups from the sidebar.
2. Locate the group you want to delete in the groups table.
3. Click the Delete action button on the group's row.
4. A confirmation dialog will appear, asking you to confirm the deletion.
5. Review the group name displayed in the dialog to ensure you are deleting the correct group.
6. Click Confirm to proceed with the deletion, or Cancel to abort.

warning

Deleting a group is irreversible. All users will be removed from the group, and all permission set assignments targeting this group will be revoked. Users who relied solely on this group for AWS access will lose that access.

What Happens Next

After deleting a group:

1. The group is removed from Prism's database.
2. All users are removed from the group (their individual accounts are not affected).
3. All permission set assignments for the group are revoked.
4. The group disappears from the Groups list.

tip

Before deleting a group, check its member count and assignments. If users in this group need continued access, either create individual user assignments or move the users to another group first.

---

Manage Members

Add or remove users from a group. Managing group membership is the primary way to control which users receive the group's permission set assignments.

Prerequisites

• The group must already exist.
• Users you want to add must already exist in the organization.

Adding Users to a Group

Step-by-Step Guide

1. Navigate to Admin Portal > Groups from the sidebar.
2. Locate the group you want to manage and click on it.
3. In the group details view, click Add Members.
4. A multi-select list of available users will appear.
5. Select one or more users to add to the group.
6. Click Add to confirm the selection.

tip

The user list supports multi-select, so you can add several users to the group in a single operation. This is particularly useful when onboarding a new team.

Removing Users from a Group

Step-by-Step Guide

1. Navigate to Admin Portal > Groups from the sidebar.
2. Locate the group you want to manage and click on it.
3. In the current members list, locate the user you want to remove.
4. Click the Remove action next to the user's name.
5. Confirm the removal when prompted.

warning

Removing a user from a group revokes all group-level assignments for that user. If the user has no other path to access (via another group or direct user assignment), they will lose AWS access for those accounts.

What Happens Next

After modifying group membership:

1. The membership changes are saved in Prism's database immediately.
2. The member count for the group is updated in the Groups list.
3. Added users inherit all group assignments for this group.
4. Removed users lose all group assignments for this group (unless they have the same access via another path).

Best Practices

• Audit membership regularly -- Review group membership periodically to ensure only authorized users have access.
• Use groups for team-based access -- Align groups with your team structure for easier management.
• Check assignments before removing -- Before removing a user from a group, verify whether they need continued access through a different group or a direct assignment.