# Groups

_LOFTai › Administration_

## Overview

The Groups page (ADMIN) is where you decide what people can do. Each row states what the group grants and how many members it has, so you can see the shape of your permissions without opening anything.

A group is one half of the picture: it chooses what a person does within the limits of the license (seat) they hold. A group can never grant more than the license allows — see Users for the license side.

## Managing Groups

-   New group — name it, describe it, and optionally start from a copy of another group's permissions
-   Permissions (shield icon) — choose what the group grants
-   Edit (pencil) — change the name or description
-   Delete (bin) — remove the group; you'll be told how many members it has first
-   Open — the group's detail page, where you manage its members

## Permissions

The shield icon opens the permissions panel, which is split into two halves. Every setting there carries a short description of what it controls, so the summary below is only the shape of it.

**Modules** decide what the group can reach — the sidebar entries and the pages behind them. Turning off **Manage** hides the whole Manage and Admin area, including every sub-setting indented beneath it. Modules control visibility only: being able to see the Generate page is a different setting from being allowed to run a generation.

**Actions** decide what the group may change — creating, editing and deleting assets, and running generation. These are allow or deny, with no middle setting, and they are checked on the server, so they apply to the assistant and the desktop client as well as the web app.

Manage sub-settings use **view** for read-only and **edit** for the write half of that page. On Queue, for example, view shows the project's whole generation queue while edit is what allows deleting other people's queue items — without it, a person can only delete their own.

## System groups

Groups marked **System** (such as loft\_free and loft\_admin) are created by the platform, and every member of the organization depends on one of them. You can change what they grant, but they can't be renamed or deleted.

Tip: A group tagged "Grants nothing" has no permissions set. Adding someone to it has no effect — set its permissions, or use a different group.

## Group Detail & Members

Open a group to manage its members. On the Members tab, pick a user and click Add to place them in the group, or remove a member with the close icon. The same membership can be managed from the other direction on a user's detail page — under Groups, use "Add to group…" or the remove icon on a group chip. The Security tab configures the group's access permissions.

## Access Control

Each group can have specific permissions that control which project areas and features its members can access. Open the security configuration from the access icon in the table or the group's Security tab.

Membership in a Loft group is also what opens the app itself. A user with no Loft group (for example someone added only to Resource) does not see Loft in the portal and is shown a "not a member" screen if they open a Loft link directly. Add them to a group such as **loft\_user** to let them in; which projects and libraries they then see is decided by project visibility and library sharing.