Groups

Groups are a powerful tool in Coralogix for bringing the right people together around the right data. They let you uniformly define user actions and control where they can act across the platform.

Use groups to:

• Grant role and policy-based permissions at scale, rather than managing users individually.
• Support collaboration across functions (e.g., DevOps, SecOps) without sacrificing security.
• Create data silos where necessary, so that only the relevant team can view specific dashboards, alerts, or other entities.

For details on creating or editing groups, see Create and Manage Groups.

The power of membership-only groups

Groups are membership-only. Membership is their primary property and is assigned manually.

With membership-only groups:

• No role or scope is required.
• Any relevant feature can consume the group directly.

Groups and access control

Through group membership, admins may grant users role-based and policy-based access:

• Role-based permissions determine whether a user can access a type of resource at all (for example, dashboards).
• Access policies fine-tune access for each individual resource (for example, a specific dashboard), including what actions a user or group can perform.

Groups as reusable building blocks

Groups act as a cross-platform feature: a reusable building block that any feature can use to attach users in bulk, beyond role and policy-based attachment. They can be a foundation for personalization, collaboration, and automation.

• Filter and personalize list views. For example, personalize your Cases view by group so a support team member can see only their own cases.
• Support collaboration and automation by attaching users in bulk. For example, attach different user groups to different SCIM configurations for Coralogix access.
• Restrict access to sensitive entities. For example, restrict team API keys, dashboards in Custom Dashboards, and System Datasets to a specific group.

Group types

Coralogix users can belong to one or more groups. Group types define who can see a group and how strictly access is enforced for its members. Group types are defined by visibility.

Type	Description
Open	Discoverable and joinable by any user. Useful for broad collaboration.
Closed	Hidden from other users. Membership by invitation or admin assignment.
Restricted	Closed group for sensitive content. Entities created for or assigned to this group are visible only to its members.

Open

Open groups allow everyone to see the group throughout the product whenever a feature presents a list of groups. Open groups are available to everyone who has the relevant role-based permissions.

Closed

Closed groups are visible only to members, and membership is assigned manually. Closed groups can be organized by project team or organizational structure. They do not need to match a user’s role within the system.

Restricted

Restricted groups are closed (hidden) and add policy enforcement on top of membership. This is typically used for highly sensitive data, compliance requirements, and the creation of data silos.

Restricted group behavior

When you create or use a restricted group, entity types assigned to that group are visible only to its members. Any content created by a restricted group is private and can only be viewed and edited by its members.

Restricted groups are intended for highly sensitive data, compliance needs, and (as a more advanced use case) creating data silos.

For example:

• Share a troubleshooting dashboard only with your SRE group.
• Restrict a critical alert to the SOC Analysts group.
• Partition client environments by assigning each MSP customer to their own group.
• Allow everyone to view a dashboard, but only the Developers group to edit it.
• If you have a dashboard you want to share with some people and do not want anyone else to see or change it, restricted-group policy enforcement can ensure it is shared only with the relevant group.

Required permissions

Users with the following permissions can view and manage groups.

Resource	Action	Explanation
team-groups	Manage	Create groups, and control membership and permissions.
team-groups	ReadConfig	View groups, membership, and permissions.
team-groups	ReadSummary	View group summaries (lightweight view used in Access Policy UIs).