The article describes how to use Groups in Pigment to assign Roles efficiently across multiple Applications. It explains how to create and manage Groups, assign Roles and Members, and how to handle conflicts when Members belong to multiple Groups with differing permissions.

Groups makes it easy to manage Role assignments in one place, letting you update Members in bulk using CSV files. This streamlines access management and helps keep everything organized.

Create a Group

1. Open the Workspace homepage, and click Settings. 
2. Click Members Management, and open the Groups tab. 
3. Click + Create a Group.
4. Enter a Group name and a meaningful description.
5. Set up Application access: 
   a.  Choose Applications and Roles, and click Add.
   b. Repeat as required. 
6. Invite and manage Members: 
   a.  Select Members from the menu, and click Add.
   Members must be added to the Workspace before they can be included in a Group.
   b. Repeat as required. 
7. Click Create to finish.

Assign Members to Groups with CSV

You can conveniently bulk assign Members to Groups by uploading a CSV file. To help you get started, sample CSV templates Empty Example, and Current Group Assignments CSV are available for download in the Assign Members to Groups with CSV pane.

1. Open the Workspace homepage, and click Settings. 
2. Click Members Management, and open the Groups tab. 
3. Click Assign Groups with CSV.
4. Click Select a file or drag and drop your file to upload your CSV.
   CSV files must be formatted with Email, Account Type, and Group Name headers.
5. Under Assignment options, toggle Replace existing assignment on or off.
   By default, this feature is off and only adds Members that are not currently in the current Group assignment. When toggled on, it overwrites all existing Group assignments with the configuration from the uploaded CSV file.
6. Click Next.
   The Confirmation pane displays a summary of changes per Group.
7. Click the menu on a individual Group to see Added or Removed members.
8. Click Show to reveal any conflicts within a Group. 
   Existing Members who have been manually assigned a Role within an Application retain this Group assignment.
9. Click Assign Groups.

A warning summary appears at the top of the Groups tab if there are remaining conflicts:

• Click Review Groups to see all conflicts.
• Click Show All Groups to return to the Groups tab.

Edit a Group

1. Open the Workspace homepage, and click Settings. 
2. Click Members Management, and open the Groups tab. 
3. Hover over the Group and click the menu (…).
4. Click Edit Group.
5. Expand Application access to view the selected Applications for this Group.
6. (Optional) Click X to remove an Application from the Group.
7. (Optional) Use the Applications and Roles menus to add new Applications and associated Roles to the Group assignment.
8. Expand Application access to view the selected Applications for this Group.
9. (Optional) Click X to remove a Member from the Group.
10. (Optional) Use the Members menu to add new Members to the Group assignment.
11. Click Save.

Identify Role conflicts in Group assignment

A conflict occurs when a Member is assigned two different Roles for the same Application through different Groups. For example, if a Member belongs to both the Finance Modeler and Finance Admin Groups, and each assigns a different Role (Modeler and Admin), it creates a conflict. In such cases, no Role will be assigned to the Member for that Application.

Conflicts are identified directly in the Groups page or in the Application where the conflict exists. 

• Groups page. A yellow warning appears within the Groups page.
  1. Click Review groups to identify which Groups contain a conflict.
  2. Click View details, and then click Members to view the Role issues.
   
• Application. A yellow warning appears in the Application where the conflict exists. Click Review Members to identify which Members contain a conflict. 

Resolve Role conflicts in Group assignment

There are three ways to resolve Role conflicts in Group assignment: 

• Assign the Member to a single Group. Ensure the Member is part of only one Group to avoid Role conflicts.
• Review and reassign Application Roles. Check the Roles assigned through Groups and make necessary adjustments to ensure there is no overlap.
• Manually assign a Role. Within the Application, manually assign a specific Role to the Member to override any Group-assigned Roles.