Admin ConsoleOrganization Basics


What are groups?

Groups relate together individual members and provide a scalable way to assign access to and permissions for specific collections. When onboarding new members, add them to a group to have them automatically inherit that group's configured permissions.


Groups are available to Teams and Enterprise organizations.

Using groups

Teams and Enterprise organizations can designate access to collections based on member groups, rather than individual members. Group-collection associations provide a deep level of access control and scalability to sharing resources. One common group-collection methodology is to create Groups by Department and Collections by Function, for example:

Using Collections with Groups |
Using Collections with Groups

Other common methodologies include Collections by Vendor or System (for example, members in an Engineering group are assigned to a AWS Credentials collection) and Groups by Locality (for example, members are assigned to a US Employees group or UK Employees group).

Create a group

Organization admins (or higher) and provider users can create and manage groups. To create a group:

  1. Log in to your web vault and open your organization.

  2. Open the Groups tab and select the New Group button:

    New group  |
    New group
  3. Give your group a Name.


    The External Id field is only relevant if you are using Directory Connector.

  4. On the Members tab, assign members to the group.

  5. On the Collections tab, assign collections to group. For each collection, select the desired permissions:

    Collections permissions |
    Collections permissions

    Permissions can designate that members can either view-only or edit items in the collection, as well as whether passwords are hidden.

  6. Select Save to finish creating your group.

Edit members assignments

Once your groups are created and configured, add members to them:

  1. In your organization vault open the Groups tab.

  2. For the group to edit, use the options menu to select Members.

  3. Add or remove members from the group and select Save.

Edit collections assignments

If you want to change the collections or permissions assigned to a group:

  1. In your organization vault open the Groups tab.

  2. For the group to edit, use the options menu to select Collections.

  3. Add, remove, or change collections permissions from the group and select Save.

© 2023 Bitwarden, Inc.