Overview
User groups allow you to simplify your workspace management. You can create user groups based on workspace roles to easily group multiple users with the same role to initiate, approve, or sign transactions. Using groups simplifies creating rules and approval flows. Only the workspace Owner and Admins can manage user groups.
How user groups are used
Once created and approved, user groups can be used in two ways:
- In Policy rules: Assign groups as initiators, approvers, or signers for transaction policies.
- As approval groups: Assign groups to approve workspace configuration changes like whitelisting addresses or managing users. Learn more about Approval Groups.
Why use user groups
You can create groups based on workspace user roles or internal company roles to easily designate multiple users to initiate, approve, or sign transactions based on those roles. Assigning groups to these parameters simplifies both creating rules and approval flows. As your company grows or changes, group-based rules help reduce the frequency of revising your Policies and approval flows.
Examples of user groups
You can create groups based on workspace roles, such as Admins and Editors, and their common privileges in your workspace.
Say your company has the following workspace roles and users with those roles:
- Owner: John Smith
- Admin: Margaret Taylor, Joshua Hill
- Non-Signing Admin: Thomas Cooper, Wendy Harris
- Editor: Jason North, Michael Black
If you want to create groups based on the users' workspace roles, that might look like this:
Approving user group changes
Changes to user groups require approval from your workspace's assigned approval group. By default, your Admin Quorum approves these changes. You can customize which group approves user group changes in your workspace's approval group settings. Learn more about Approval Groups.
Accessing user groups
To manage your user groups, go to Settings > Users > Manage groups.
The Groups section on the left shows a list of your workspace’s active and pending user groups. Select a group to view its details.
Creating a user group
Important
Creating, editing, or deleting groups can directly impact your Policy's functionality. Consider how changes will affect your Policy before submitting. Also, check your Active Policy view for error or warning indicators after you save any changes.
-
On the Manage groups window, select + Create Group.
-
On the Create new group window, name the group and add the users you want to include. The users you add appear on the right, organized by their workspace roles.
- Select Create group.
Your Admin Quorum and Owner must approve the new group. Until they approve it, you can only view the group’s details.
Viewing pending new groups or group changes
To view a group’s details, select it from the Manage groups section on the left. The group detail view for a pending new group or an existing group with pending changes looks like this:
- Pending Approval banner: Highlighted in yellow at the top right. Select the banner to see how many approvals are still needed.
- Changes panel: On the far right. If it is a new group request, it lists all users and their roles. If it is a group change request, it lists all new users that were added to and removed from the group.
-
Cancel: Select Cancel under the approver list to cancel the request.
- Policy rules impacted indicator: Under the group name at the top. Shows how many of your existing Policy rules will be impacted by the creation of this new group.
Approving a new user group
- After you submit a new user group for approval, your Admin Quorum and Owner receive notifications in their Fireblocks mobile app.
- Tap View to see the group details. If the details extend beyond the bottom of the screen, the Approve and Deny buttons do not appear until you scroll to the end.
- Tap Approve. After your request reaches the approval threshold, the group is immediately active and moves up to the Groups section.
Approving a user group change request
- After you submit a user group change request for approval, your Admin Quorum and Owner receive notifications in their Fireblocks mobile app.
- Tap View to see the change details. If the details go beyond the bottom of the screen, the Approve and Deny buttons do not appear until you scroll to the end.
- Tap Approve. After your change request reaches the approval threshold, the changes to the group immediately go into effect.
Denying a user group request
- Any Admin can reject a new group request or group change request by tapping Deny at the bottom of the request, then Yes, in their Fireblocks mobile app.
Viewing impacted Policy rules
For both active groups and groups that are pending approval, you may see an indicator under the group name that says (X) Policy rules impacted.
This lets you know how many existing Policy rules use this group. Therefore, changing this group may cause errors or warnings related to the impact of removing or adding certain users, as well as errors or warnings related to how the change impacts the rule’s approval threshold.
- From any group’s detail view with at least 1 rule impacted, select (X) Policy rules impacted.
- This opens the Impacted Policy rules tab in Edit Mode. Impacted rules show on the left.
- Select any rule, then select See rule in Policy Editor to see the rule details.
Deleting an existing user group
- On the Manage groups window, select the group you wish to delete from the left.
- Select Delete
.
- On the confirmation window, select Delete group.
Your Admin Quorum and Owner must approve deleting the group. After your request reaches the approval threshold, the group is removed from the Groups section.
Duplicating a user group
Sometimes you may want to create a new group that includes multiple users from an existing group. You can save time by duplicating the group instead of drafting the group from scratch.
Note
We recommend that separate groups have mostly different users. When using duplicates, add enough other users to the new group so that both groups are distinct.
- On the Manage groups page, select the group you want to duplicate on the left.
- Select Duplicate
.
- On the confirmation window, select Duplicate group.
- A Create new group window appears with the same users and the same name, followed by (copy). You can rename the group with any group name that’s not already in use.
- Add or remove users to the group as needed.
- Select Create group.
Your Admin Quorum and Owner must approve this duplicate user group. Until they approve it, you can only view the group’s details. Unlike when changing existing groups, it shows under Pending approval. Note that the Changes panel shows the duplicate group’s users as if you created the group from scratch and is not a comparison against the original group.
Editing a user group
- On the Manage groups page, select the group you want to change from the left.
- Select Edit group.
-
On the Edit group window, make the necessary changes. You can change the group’s name and add or remove users. You can only choose a name that's not already used by an active group.
- Select Save changes.
After you submit your group change request, your Admin Quorum and Owner must approve it before the changes go into effect. Note that pending changes to an existing user group do not move the group from the Groups section.
Until your change request is approved, the group shows a yellow Changes pending banner in the top right corner, and you can’t make any further changes.