Groups

In Data Access, a group is a collection of identities. A group can also include other groups. The identities and nested groups within a group are collectively called members.

Groups are imported from your data sources during synchronization. Groups in Data Access also include Collibra user groups.

How to use groups

You can use groups as beneficiaries or owners in access controls to define who gets access to data and who can manage it. Groups help you efficiently manage or assign access, or delegate ownership, to multiple identities at once.

You can use groups in the following ways.

Way	Description
As beneficiaries	You can add groups as beneficiaries of access controls. For example, if you add a group as a beneficiary in a role, all identities within that group inherit the permissions that are defined in the role.
As owners	You can set a Collibra group as the owner of a data source, data object, or access control. Every member of the group then has the same ownership capabilities as an individual owner, such as managing access to the entity or getting assigned to its access requests.
In dynamic rules	Groups can have tags that are imported from your data sources, and these tags are automatically inherited by the identities within the group. You can use these tags to define dynamic rules for access controls. For example, you can create a dynamic rule that grants Read access on a data object to any identity that inherits the tag `Department:Sales` from its group.

Groups as access controls

A group is a specialized type of access control. While standard access controls such as roles, column masks, and row filters map specific users (the Who component) to specific data objects (the What component), a group has only a Who component, which consists of identities or other nested groups.

Viewing a group

To view a group, on the Data Access landing page, in the left pane, click RESOURCES > Groups, and then click the group name.

The Summary tab

The Summary tab on a group page contains the following information.

Section	Description
Parent groups	Other groups that this group is a member of.
Members	Identities and other groups that are members of this group.

The Access tab

The Access tab on a group page contains the following information.

Section	Description
Data objects	Data objects that this group can access.
Roles	Roles that allow this group to access data.
Access on request	Access controls that allow this group to temporarily access data upon request.
Column masks	Column masks that allow this group to see unmasked data.
Row filters	Row filters that allow this group to see filtered rows.

The Audit tab

The Audit tab on a group page contains the audit trail of the group.