Manage groups
In Opti ID, user access to any entitled product is done using groups. A group contains users, products, and roles. In the Opti ID Admin Center, you can create a group and assign it product entitlements, roles per product, and users. After logging into Opti ID, a user can access any products assigned to any group they belong to. Access to the product is constrained by the roles assigned for that product in the group.
A group lets you organize users with similar roles or entitlements that reflect your internal organizational structure or teams. You can also create groups that match your identity provider (IdP) configuration. If you have multiple products, you can create a group for each.
There are three types of groups.
- Custom groups – Groups you create and configure yourself. You can make any edits you want to custom groups.
- Internal groups – Includes the Everyone group (which automatically contains all users within an organization) and groups managed by SCIM (required for some internal processes to function). While you cannot add or remove users in internal groups, you can change any permissions granted by the group.
- Product groups – Default groups that are automatically set up for your account based on your Optimizely products. There is a group for each system role. This way, you can add users who should have the same role to a product group instead of individually assigning the system role to each user. You can only add or remove users in product groups. Product groups are not visible on the Group Access page but are available when inviting or updating users.
View and filter groups
You can use the following filters on the Group Access page to find and manage the groups that are most relevant to you.
- Filter by Group Type – View groups based on their type. The default filter includes Custom and Internal groups. When you update this filter, click Apply to filter by your selections. Select Save Selection to maintain this filter each time you view the Group Access page.
- Product – View groups for a specific product.
- Instances – Available only after you apply the Product filter. View groups for a specific instance of the product you selected.
- Roles – Available only after you apply the Product filter. View groups based on the roles assigned to them, which can help you identify groups with certain access levels.
Add a custom group
- Go to Group Access in the Opti ID Admin Center. A list of groups showing the name, number of users in the group, group type, and created and modified dates displays.
- Click Add Group. The Add Group panel displays.
- Complete the following settings:
- Name – Enter the name of the group, such as CMPUsers.
- Users tab – Enter the name of an Opti ID user you want to add to the group. As you type, the user's names of users you have already invited to Opti ID display. Select the users you want and the users are added to the group list. You can also remove users from the group as needed. You can add new users to the group later when you invite the user.
- Products tab –
- Select a product instance from the Select a product instance drop-down list.
- Select one or more roles from the Select roles drop-down list. For Experimentation only, there are project-level roles and instance-level roles. Project-level roles apply only to the project specified in the role name. Instance-level roles apply to all current and future projects within the specified instance and include "Account" in the role name (for example, Opti Marketing - Account - Editor).
- Click Add to finalize your product and role selections and add them to the group.
- Repeat these steps as necessary to add the desired products and roles to the group. Each time you click Add, the selections display as shown in the following image.
- Details tab – Enter a description of the group. By adding a description, you can distinguish groups from one another. The description displays beneath the group name in the group list and in the Details tab for each group.
- Click Save to create the group.
Edit a group
When you edit a custom group, you can
- edit the group name.
- add or remove users in the group. When you remove a user from a group, the group is removed from the user profile. (You may need to refresh the page to see the removal of the group).
- add or remove products and roles in the group (custom or system roles).
- edit the group description.
For internal groups, you can only add or remove permissions. For product groups, you can only add or remove users.
- Go to Group Access in the Opti ID Admin Center.
- Click the group name of the group you want to edit, then click Edit, or click More (...) > Add user to group.
- Make your desired edits as described in step 3 of the Add a custom group section.
- Click Save when you are done editing the group.
Delete a custom group
When you delete a group, it is removed from the group list and user profiles. You can only delete custom groups.
- Go to Group Access in the Opti ID Admin Center.
- Click More (...) > Delete group.
- Click Delete Group to confirm.