---
title: Administer groups
slug: cms-13/docs/administer-groups
docTags: 
createdAt: 2026-07-30T20:22:08.256Z
---

:::hint{type="info"}
**Note**
This topic is for CMS administrators and developers with administrative access rights.
:::

Use **Administer Groups** to create and manage user groups, assign members, and delete groups. Groups created here are managed locally in CMS, and Opti ID roles can coexist with them. Group-based access rights are easier and safer to maintain than per-user assignments, especially as the editor team grows.

:::hint{type="info"}
**Note**
If your organization migrated to Opti ID, you must manage users in Opti ID. See the [Opti ID](docId\:gfcl33i3WnqFAwFi9CT6y) user documentation.

- To add users with Opti ID, see [Users](docId\:afJzJCmm5TkQ4CDpUlXQh) in the Opti ID documentation.
- To add groups with Opti ID, see [Groups](docId\:WAK--fqnE1yE8NKjckoq7) in the Opti ID documentation.

Roles managed inside CMS 13 (PaaS) are not available to Opti ID users. CMS (PaaS) roles are typically used for end users (site visitors and customers), not for users who access the CMS UI.
:::

Administer user credentials in the following ways:

- **Administer Groups** from the CMS **Settings** view. Use when managing a small set of CMS-local groups without an external identity provider. Groups created here exist only within CMS and are independent of Windows or Opti ID.
- Manage users and user groups in Windows. Use when your site runs Windows Server authentication and user identity is managed by the operating system. Groups created in the CMS **Settings** view are available from **Settings** only; they are not accessible from Windows. You cannot add users created in Windows to groups created in Optimizely. See [Virtual roles](docId\:lXJi8ltLTXcP9rRo3dQOO) for information about working with membership and role providers.
- Develop a customized role and membership provider. Use when your organization requires integration with an external identity system beyond what CMS or Windows provides. A developer implements this option.

Smaller organizations with few editors tend to use the CMS administration view, whereas larger organizations with many editors tend to use the other options. Combine these options as needed.

## Display members of a user group

Review group membership to verify that the right users hold the access rights granted to a group. Use this view to audit assignments before changing permissions.

1. Go to **Settings** > **Administer Groups**. The **Administer Groups** window displays.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/z8SVYPm0uoIRy1rCo4l2b_2f66551530148e2089947aeb3edf9b78063ca7cc24487dbc409df9d1b5554d55-image.png)

2. Click a group name to view its members.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/apWbaYKOm0CvbycOJ7fui_70d520f78d0c0fa3d7590874273c092f207ff391d25815631f69d7561f97ff88-image.png)

:::Paragraph{listStyleType="disc" indent="2"}
To see all users or groups, leave **Search** blank.
:::

:::Paragraph{listStyleType="disc" indent="2"}
Enter one or more letters in the **Search** field to see a subset of users or groups. The window displays any names that contain the string.
:::

## Create a group

Create a CMS-local group to bundle users that share the same access rights. Group-based assignment keeps permission management consistent and easier to maintain than per-user grants.

Groups display regardless of the provider used on the website. The group provider displays next to the group name.

1. To create a user group, click **Create Group**. The **Add Group** window displays.
2. Enter a group name (for example, *MarketingEditors*) and click **Create Group**.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/yQDMw9nB9J2D4qYtk21ph_8167d97da1ca491a5705225c902208da8df50f3fbed2e513c731e0dd0bfd7c1f-image.png)

## Delete a group

Delete a group when it is no longer needed so that obsolete access paths do not linger in the CMS. Removing unused groups reduces clutter and the risk of unintended permission grants.

Select **Delete** from the group's menu. The **Delete Group** window displays options for removing the group and managing associated access rights.

- **Delete content access rights** – Select to remove the content access rights for the group *MarketingEditors*.
- **Delete permissions to functions** – Select to remove the function-permission assignments for the group.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/OVhLmAkAOPzEC8CiVVr04_e710d00d3fca4a4da649d689e6d12e67d67b1cfca903257f9c4d58b10fc84ff3-image.png)

:::hint{type="danger"}
- **Warning**
  Only user groups created in CMS can be deleted.
- Deleted user groups cannot be recovered.
- Renaming an existing group is not supported. Delete the group and create a replacement.
:::