Cloud Gateways Switching WiFi Camera Security Door Access New Integrations Accessory Tech Identity
User
Sign Up UniFi Site Manager
Help Center Help Articles Professional Support Community RMA & Warranty Downloads
User
Sign Up UniFi Site Manager
Help Center Help Articles Professional Phone Support Community RMA & Warranty Downloads
Cloud Gateways Switching WiFi Camera Security Door Access New Integrations Accessory Tech Identity

Social

Facebook Twitter Youtube Instagram

Company

Careers Contact Us Investors

Training

Courses Calendar Trainers Become a Trainer

Tools

WiFiman UISP Design Center
Back to Top
  1. Ubiquiti Help Center
  2. UniFi
  3. Identity Enterprise
  4. Admin Guide - Features & Configuration

UniFi Identity Enterprise - Groups

Assigning resources to certain groups and then assigning users to those groups can ensure that only the right users have access to certain resources. This also saves the hassle of adding, managing, and changing user access at the user level. To manage groups, go to Organization > Members > Groups.

Create Groups

When a new workspace is created, a root organization with the same name as the workspace is automatically created. This is the highest organization level in the workspace and cannot be modified.

Notes

  • Only the Owner and Super Admin can create and manage sites and groups.
  • Only the Owner, Super Admin, Workspace HR Admin, Site Admin, and Site HR Admin can create a sub-group.
  • IT Admin, Site Admin, and Site IT Admin are only available by default in workspaces created before February 2023.

To add a group:

  1. Create a Site and Group: Once a new site is created, a new group with the same name is also created automatically.
    1. Sign in to your Identity Enterprise Manager (https://[your workspace domain].ui.com/cloud).
    2. Go to Settings > UniFi Consoles > Sites and click New Site.
  2. Create a Group under a Workspace: Go to Organization > Members > Groups and click the Add Group icon.
  3. Create a Sub-Group under a Group: Do either of the following:

    1. Go to Organization > Members > Groups, hover your mouse over a group, and click the three dots icon > Add Sub-group.

    2. Go to Organization > Members > Groups, click on a group, and click Users in the prompted panel > Go to Sub-Groups and enter the sub-group name.

Set Group Visibility

Group Visibility allows admins to determine whether a group is visible to all workspace users or only authorized users and groups. When a group is visible to a group of users, they can view and search for it in the user directory.

Note: This feature is only available in the Identity Enterprise Standard Plan. To subscribe to it, please use your owner account to sign in to your Identity Enterprise Manager and go to Settings > Plan & Billing > Upgrade Plan.

  1. Go to Settings > Users > Permissions and tick the "Allow users to view the user directory" checkbox. This option is enabled by default.
    • When ticked, user access to the directory is based on the Group Visibility settings.
    • When unticked, no user can view the groups. Only admins with the "Users and Groups Edit" permission can view the groups.
  2. Go to Organization > Members > Groups and select a group.
  3. Go to Settings > Visibility and select "Public" or "Private".
    • Public: All users can view this group in the user directory.
    • Private: Only the admins, authorized users, and groups can view this group in the user directory.
      1. Click Assign Users or Groups.
      2. Select users and groups.
      3. Click Add.
  4. Click Save.
Was this article helpful?
1 out of 3 found this helpful