Groups
A group is a named set of people and service accounts. Share a resource with the group and every member gets the role.
A group is a named set of people and service accounts. When you share a resource with a group, every member gets the role. Add someone to the group later and they get the same access without a new grant.
Managing groups
Open Groups in the sidebar, at /helios/groups. Only organization admins can create or change
groups.
- New group creates a group. Give it a name that describes the team, for example "support".
- Open a group to add or remove members. Members can be people or service accounts.
- Rename or delete a group from the same page. Deleting a group removes every grant that was made to it.
Using a group
Pick the group as the principal in the share dialog. The access list shows the grant on the group, and each member's effective role includes it.
A common shape is one group per team, shared on the team's project at editor, with the rest of
the organization at viewer or operator.
From the CLI
helios group list
helios group create support
helios group member add support user:<id>
helios group member add support sa:nightly-digest
helios group member remove support user:<id>
helios group rename support customer-support
helios group delete customer-supportGroup commands need the organization admin role, like the dashboard.
Related
- Sharing
- Team management - who is in the organization at all.
Last updated on
Sharing
Open the share dialog on any resource, pick who gets access and at which role, and set an expiry. The same grants can be made from the CLI.
Service accounts
A service account is a non-human identity. Assign it to a workflow with Runs as, share resources with it, and disable it to stop every run that uses it.