Creating and Managing Groups
Learn how to create and manage groups to share content with your team and clients.
As an MSP Admin, you can create and manage groups for your own tenant and for your end-customer tenants. This allows you to control who can see and share content within your organization and with your clients.
How To Create a Group MSP Admin Dashboard
From your MSP Admin Dashboard, navigate to the to the tenant you would like to create a group for
Select the "Group" tab.
Click the "Create Group" button.
This will open a new window where you will be prompted to name the group and add users.
For your own tenant: You can add any user from your organization.
For a client tenant: You can select the client's tenant and add their users to the group.
Select the "Create Group" button.
5. This will open a new window where you will be prompted to name the group and add users. When complete click "Create Group"
For your own tenant: You can add any user from your organization.
For a client tenant: You can select the client's tenant and add their users to the group.
6. Select Workshop Items to add to the group. You can add Apps, Agents and Workflows to groups!
7. View the newly created group in that tenant's layout!
How To Create a Group as a Client Admin
Navigate to the Workspace Tab
Select the "Group" tab.
Click the "Create Group" button.
This will open a new window where you will be prompted to name the group and add users.
5. This will open a new window where you will be prompted to name the group and add users. When complete click "Create Group" You can add any user from your organization.
6. Select Workshop Items to add to the group. You can add Apps, Agents and Workflows to groups!
Viewing Content Shared with Your Groups
When content is shared with a group you are a member of, you will see it in the "Shared with me" tab. The name of the group will be visible, so you know who the content was shared with.
You can add or remove users from a group at any time from the MSP Admin Dashboard.
I'm assuming you’re referring to the formatting of the document "Managing Group Membership" that you provided. I'll refine the formatting for clarity and consistency while maintaining the content. Since I'm in Ask mode, I’ll present the revised document below. If you’d like me to save it as a file, please switch to Agent mode or let me know.
Managing Group Membership
Groups allow you to organize users and share apps and agents with specific teams or departments. This guide explains who can add users to a group and the conditions that must be met.
Permissions Overview
There are six permissions related to groups, split between the Admin Console (MSP) and the Tenant Platform:
Permission | Scope | What It Allows |
Create Groups | Admin & Tenant | Create new sharing groups |
Manage Groups | Admin & Tenant | Edit and delete groups, add and remove members |
Share with Groups | Admin & Tenant | Share apps and agents with groups |
Note: Adding users to a group requires the "Manage Groups" permission. Having only "Create Groups" permission is not sufficient to add members after the group is created.
Roles That Can Add Users by Default
The following roles have the Manage Groups permission by default and can add users to any group they have access to:
Admin (MSP) Roles:
Primary Admin
Admin
Helpdesk
Tenant Platform Roles:
Client Admin
Roles That Need Additional Permissions
The following roles do not have group management permissions by default. An administrator must explicitly grant them the "Manage Groups" permission (via role configuration or a custom role) before they can add users to groups:
Admin Console (MSP) Roles:
Billing Manager
Client Manager
Tenant Platform Roles:
General User
App Builder
Chat Only User
Group Owner Privileges
Every group has a designated owner (set when the group is created). The group owner can always add and remove members from their group, regardless of whether they have the "Manage Groups" permission.
This means:
A General User who owns a group can manage that group's members, even though they don't have "Manage Groups" by default.
However, the owner can only manage membership for groups they own—not other groups. To manage members across all groups, the "Manage Groups" permission is still required.
Requirements for the User Being Added
Not just anyone can be added to a group. The person being added must have an existing role in the same organization (entity) as the group.
This means:
You cannot add a user from Tenant A into a group that belongs to Tenant B.
The user must already be a member of the organization—they need to be invited and assigned a role first before they can be added to any groups within that organization.
The UI only shows eligible users when selecting group members, so you will only see users who meet this requirement.
Summary
Scenario | Can Add Members? |
User is the group owner | Yes—always for their own group |
User has Manage Groups permission and access to the group's entity | Yes—for any group in entities they can access |
User has Create Groups permission only (not Manage) | No—can create groups but cannot manage membership afterward |
User has no group permissions and is not the owner | No |
Target user does not belong to the group's organization | Cannot be added—they must be invited to the org first |