Groups

The Groups page (ADMIN) is where you decide what people can do. Each row states what the group grants and how many members it has, so you can see the shape of your permissions without opening anything.

A group is one half of the picture: it chooses what a person does within the limits of the license (seat) they hold. A group can never grant more than the license allows — see Users for the license side.

• New group — name it, describe it, and optionally start from a copy of another group's permissions
• Permissions (shield icon) — choose what the group grants
• Edit (pencil) — change the name or description
• Delete (bin) — remove the group; you'll be told how many members it has first
• Open — the group's detail page, where you manage its members

The shield icon opens the permissions panel, which is split into two halves. Every setting there carries a short description of what it controls, so the summary below is only the shape of it.

Modules decide what the group can reach — the sidebar entries and the pages behind them. Turning off Manage hides the whole Manage and Admin area, including every sub-setting indented beneath it. Modules control visibility only: being able to see the Generate page is a different setting from being allowed to run a generation.

Actions decide what the group may change — creating, editing and deleting assets, and running generation. These are allow or deny, with no middle setting, and they are checked on the server, so they apply to the assistant and the desktop client as well as the web app.

Manage sub-settings use view for read-only and edit for the write half of that page. On Queue, for example, view shows the project's whole generation queue while edit is what allows deleting other people's queue items — without it, a person can only delete their own.

Groups marked System (such as loft_free and loft_admin) are created by the platform, and every member of the organization depends on one of them. You can change what they grant, but they can't be renamed or deleted.

Open a group to manage its members. On the Members tab, pick a user and click Add to place them in the group, or remove a member with the close icon. The same membership can be managed from the other direction on a user's detail page — under Groups, use "Add to group…" or the remove icon on a group chip. The Security tab configures the group's access permissions.

Each group can have specific permissions that control which project areas and features its members can access. Open the security configuration from the access icon in the table or the group's Security tab.

Membership in a Loft group is also what opens the app itself. A user with no Loft group (for example someone added only to Resource) does not see Loft in the portal and is shown a "not a member" screen if they open a Loft link directly. Add them to a group such as loft_user to let them in; which projects and libraries they then see is decided by project visibility and library sharing.