Access Groups in TerraTrue allows for launch access control through Products. You may learn more about creating and editing products here.
Access groups differ from Permissions since Access Groups through the use of Products solely control which user has access to a Launch, while Permissions are determined by the roles given to a user, and enables or reduces the controls they have on TerraTrue’s platform.
Access to a Launch via Product is managed by access groups. To grant a user access to a product, you will need to add the user to an Access Group. Access groups provide a more scalable way to manage access as they can be reused across multiple products.
How do I configure access groups?
Consider this example. Alice and Bob are two researchers working on an experimental product called Research X. To provide them access to view launches for product X while denying access to others, follow these steps.
1. Under Settings > Access Groups, click Create New to create an access group. In this example, we’ll call it Access Group Research X.
2. On that page, click Add Users, search for Joyce, and add her. Your page will then look like the image below. Click Save.
Note: If SSO or SCIM group sync is enabled for your organization, membership updates are not allowed through TerraTrue and must be done directly through your IdP.
How do I map an Access Group to a Product?
1. Under Settings > Products, click on the Create New button to create a product called Research X.
2. On that same page, click the Add Group button to select the access group created in Steps 1 and 2. When done, click Save. Note: Built-in “All Review Teams” which includes all users in existing review teams, are set as default in the Access groups. This may be adjusted to fit your needs.
From then on, Joyce (as well as members of review teams) can see all the launches filed for product X. More details about how to use products are here.
Important considerations:
- TerraTrue provides a built-in (dynamic) access group called 'Default' which contains all your users. This access group cannot be modified or deleted.
- Review teams will automatically be set as a Access Group in TerraTrue
- Users in Review Team Access Groups can’t be adjusted in Access Groups and must be done in Org Settings > Review Team.
- If your organization has set up SSO or SCIM group sync, membership updates are not allowed through TerraTrue and must be done directly through your Identity Provider.