Groups
Teams inherit roles for all members. Assign people here; define role matrices on RBAC. Groups do not have permissions of their own.
Read-only: viewing groups requires users.read (or RBAC assign).
Creating or editing requires users.manage or rbac.manage.
Capability recipe: custom role on RBAC, then attach it here.
Eval operators = ui.admin_access + eval.read + eval.manage.
Eval / FinOps viewers = ui.admin_access + eval.read + metrics.view
(results and spend, no create/run).
Loading…
| Group | Roles | Members | |
|---|---|---|---|
| — |
No groups yet. Create one to assign team roles (e.g. builders, auditors).