User groups

User groups help Subscription Admins (SAs) and Project Admins (PAs) manage access to SHIP-HATS tools efficiently.

Instead of assigning access to each user individually, you can group users and assign roles and permissions once. All users in the group automatically inherit the assigned access.

Note
Being part of a user group does not grant tool access by itself. Users must have the required licences. See How licences relate to user groups.

What is a user group?

A user group is a collection of users within a SHIP-HATS subscription that can be granted access to tool resources such as:

• Projects, applications, repositories, and spaces
  (for example, Jira projects, Confluence spaces, Fortify on Demand applications, SonarQube applications, Nexus IQ applications, and Nexus repositories)

How user groups control access

1. A Subscription Admin (SA) or Project Admin (PA) creates a user group.
2. Users with the required licences are added to the group.
3. The group is assigned to a tool resource and granted roles and permissions.
4. All users in the group inherit the assigned roles and permissions.
5. To revoke access, remove users from the group or delete the group.

Note
Removing users from a group or deleting a group does not revoke their licences.
Users may still access the tool portal, but will lose access to specific resources.

When to use user groups

Use user groups when:

• Onboarding or offboarding multiple users.
• Multiple users require the same roles and permissions.
• You want consistent and centralised access management.

Example
For a Jira project with many users requiring the same role, assigning a user group is faster than configuring each user individually.

How licences relate to user groups

• Licences determine whether users can access SHIP-HATS tools.
• User groups determine what users can access within those tools.

Related topics

• Overview of licences
• Provision licences to users
• Manage user groups