What are groups?

Groups relate together individual users and provide a scalable way to assign permissions, including access to collections and other access controls. When onboarding new users, add them to a group to have them automatically inherit that group's configured permissions.


Groups are available to Teams and Enterprise organizations.

Using groups

Teams and Enterprise organizations can designate access to collections based on user groups, rather than individual users. Group-collection associations provide a deep level of access control and scalability to sharing resources. One common group-collection methodology is to create Groups by Department and Collections by Function, for example:

Using Collections with Groups |
Using Collections with Groups

Other common methodologies include Collections by Vendor or System (for example, users in an Engineering group are assigned to a AWS Credentials collection) and Groups by Locality (for example, users are assigned to a US Employees group or UK Employees group).

Create a group

Organization admins (or higher) and provider users can create and manage groups. To create a group:

  1. Log in to your web vault and open your organization.

  2. Open the Manage tab and select Groups from the left-hand menu.

  3. On the Groups screen, select the New Group button:

    New Group  |
    New Group
  4. Give your group a Name and assign the desired access control.

    Access controls can designate that users can access all items (for example, all collections) or only specific collections, as well as whether passwords are hidden or logins are read-only.


    The External Id field is only relevant if you are using Directory Connector or SCIM.

  5. Select Save to finish creating your group.

Assign users to group(s)

Once your groups are created and configured, add users to them:

  1. In your organization vault open the Manage tab and select Members from the left-hand menu.

  2. Hover over the user you want to add and use the gear dropdown to select Groups:

    People Options |
    People Options
  3. Select the group(s) to add this user to and Save your selection.


You can check which users belong to a group from the ManageGroups screen by using the gear dropdown to select Users.

Edit collections assignments

If you want to change the collections or access controls assigned to a group:

  1. In your organization vault, open the Manage tab and select Groups from the left-hand menu.

  2. Select the group you want to edit.

  3. Configure the access control settings as you did when the group was initially created.

© 2023 Bitwarden, Inc.