Groups

August 28, 2026

A group is a logical collection of users.

The main purpose of groups is to facilitate assigning roles and responsibilities. When you assign a role to a group, the users in the group receive the role and its permissions.

Managing groups

There are several options for managing groups. However, you can only use one of the options below. It is not possible to combine them.

• Manage groups in LDAP, using Group field mapping.
  • Prerequisite: You have configured the Group field setting in the user attributes to assign groups.
  • If there are manually created groups in Collibra Platform, they are removed before the LDAP-managed groups are created.
  • No synchronization is required for this option to work.
• Manage groups in SSO SAML with attributes, using the Group attribute field.
  • Prerequisites:
    • SSO is configured in SAML_ATTRIBUTES mode with the Group attribute configured in the Attribute fields section of the SSO configuration.
    • Groups DGC managed is set to False.
  • Groups are assigned to users through SAML assertions by the identity provider. If a group doesn't exist in Collibra yet, it is created automatically.
  • The Group attribute can have multiple values, or groups can be sent as a comma-separated list. Group names are used, not group IDs.
• Manage groups in Collibra.
  • Prerequisite: You have not configured the Group field setting in Collibra Console in the user attribute settings.
  • Groups are managed directly in Collibra. Creating groups and assigning users to the groups is done within Collibra.
  • No synchronization is required for this option to work.

Out-of-the-box groups

Collibra contains a number of out-of-the-box groups. They are used to manage various aspects of Collibra.

Default name	UUID	Purpose
Everyone	00000000-0000-0000-0000-000001000001	The Everyone group contains all users and is mainly used to manage view permissions. It is hidden in Collibra and should not be used for anything else.
Users	00000000-0000-0000-0000-000001000002	The Users group contains all users and can be used for actions that affect all users. It is hidden in Collibra.
Data Custodians	00000000-0000-0000-0000-000001000003	The Data Custodians group is meant for users with the Data Custodian resource role and can be used for actions that affect all such users. Note When users are assigned the Data Custodian resource role for a resource, they are not automatically added to the Data Custodians group; however, you can manually add them to the group.