Groups

A group is a logical collection of users.

The main purpose of groups is to facilitate assigning roles and responsibilities. When a group is assigned a resource role, the users in the group receive the resource roles and their permissions.

Managing groups

There are several options for managing groups. However, you can only use one of the options below. It is not possible to combine them.

• Manage groups in LDAP, using Group field mapping.
  • Prerequisite: You have configured the Group field setting in the user attributes to assign groups.
  • If there are manually created groups in Collibra Data Intelligence Cloud, they are removed before the LDAP-managed groups are created.
  • No synchronization is required for this option to work.
• Manage groups in Collibra.
  • Prerequisite: You have not configured the Group field setting in Collibra Console in the user attribute settings.
  • Groups are managed directly in Collibra. Creating groups and assigning users to the groups is done within Collibra.
  • No synchronization is required for this option to work.

Out-of-the-box groups

Collibra contains a number of out-of-the-box groups. They are used to manage various aspects of Collibra.

Default name	UUID	Purpose
EVERYONE_GROUP	"00000000-0000-0000-0000-000001000001";	The Everyone group contains all users and is mainly used to manage view permissions. It is hidden in Collibra and should not be used for anything else.
USERS_GROUP	"00000000-0000-0000-0000-000001000002";	The Users group contains all users and can be used for actions that affect all users. It is hidden in Collibra.
GROUP_DATA_CUSTODIANS	"00000000-0000-0000-0000-000001000003";	The Data Custodians group is meant for users with the Data Custodian resource role and can be used for actions that affect all such users. Note When users are assigned the Data Custodian resource role for a resource, they are not automatically added to the Data Custodians group; however, you can manually add them to the group.