# Security Groups

_LOFT Resource › Administration_

## Overview

Security Groups control what each user can see and do within LOFT Resource. By assigning users to security groups, administrators can restrict access to sensitive information like salary data, budgets, and reports.

## Common Permissions

-   budget — View or edit budget and cost information
-   salary — View individual salary and rate data
-   reports\_module — Access to the Reports section
-   schedule\_module — Access to scheduling tools (Role Planner, Crew Planner)
-   manage\_module — Access to administration pages (Groups, Crew, Security)
-   role\_planner edit — Permission to modify schedules (vs. view-only)

## Managing Access

-   Create security groups that match your organization's access patterns
-   Assign users to one or more security groups
-   Configure permissions for each group
-   Users inherit the combined permissions of all their groups

Tip: Start with a restrictive approach and grant additional permissions as needed. It's easier to add access than to remember to remove it.