--- title: "Use Groups in Pigment to Assign Roles and Manage Workspace Access" slug: "use-groups-assign-roles" description: "Learn how to assign roles in Pigment with Groups, simplify access control using CSV uploads, and handle conflicts for clean, efficient user management." updated: 2025-05-30T10:06:24Z published: 2025-08-22T11:56:47Z --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.pigment.com/llms.txt > Use this file to discover all available pages before exploring further. # Use Groups to Assign Roles The article describes how to use Groups in Pigment to assign Roles efficiently across multiple Applications. It explains how to create and manage Groups, assign Roles and Members, and how to handle conflicts when Members belong to multiple Groups with differing permissions. Groups makes it easy to manage Role assignments in one place, letting you update Members in bulk using CSV files. This streamlines access management and helps keep everything organized. > [!WARNING] > **⚠️ Important** > > Only Members with a Primary Owner, Security Admin or Workspace Admin account type can manage Role settings. ## Create a Group 1. Open the Workspace homepage, and click **Settings.** 2. Click **Members Management**, and open the **Groups**tab. 3. Click **+ Create a Group**. 4. Enter a Group name and a meaningful description. 5. Set up Application access: a. Choose Applications and Roles, and click **Add**. b. Repeat as required. 6. Invite and manage Members: a. Select Members from the menu, and click **Add**. Members must be added to the Workspace before they can be included in a Group. b. Repeat as required. 7. Click **Create** to finish. > [!NOTE] > **ℹ️ Note** > > You can adjust the Applications and Members included in a Group at anytime. ## Assign Members to Groups with CSV You can conveniently bulk assign Members to Groups by uploading a CSV file. To help you get started, sample CSV templates **Empty Example**, and **Current Group Assignments CSV** are available for download in the Assign Members to Groups with CSV pane. 1. Open the Workspace homepage, and click **Settings.** 2. Click **Members Management**, and open the **Groups**tab. 3. Click **Assign Groups with CSV.** 4. Click **Select a file** or drag and drop your file to upload your CSV. CSV files must be formatted with **Email, Account Type,**and **Group Name** headers. 5. Under **Assignment options**, toggle **Replace existing assignment** on or off. By default, this feature is off and only adds Members that are not currently in the current Group assignment. When toggled on, it overwrites all existing Group assignments with the configuration from the uploaded CSV file. 6. Click **Next**. The **Confirmation pane** displays a summary of changes per Group. 7. Click the menu on a individual Group to see **Added** or **Removed** members. 8. Click **Show** to reveal any conflicts within a Group. Existing Members who have been manually assigned a Role within an Application retain this Group assignment. 9. Click **Assign Groups**. A warning summary appears at the top of the **Groups** tab if there are remaining conflicts: - Click **Review Groups** to see all conflicts. - Click **Show All Groups** to return to the **Groups** tab. ## Edit a Group 1. Open the Workspace homepage, and click **Settings.** 2. Click **Members Management**, and open the **Groups**tab. 3. Hover over the Group and click the **menu (…).** 4. Click **Edit Group**. 5. Expand **Application access**to view the selected Applications for this Group. 6. *(Optional)*Click **X** to remove an Application from the Group. 7. *(Optional)*Use the Applications and Roles menus to add new Applications and associated Roles to the Group assignment. 8. Expand **Application access**to view the selected Applications for this Group. 9. *(Optional)*Click **X** to remove a Member from the Group. 10. *(Optional)*Use the Members menu to add new Members to the Group assignment. 11. Click **Save**. ## Identify Role conflicts in Group assignment A conflict occurs when a Member is assigned two different Roles for the same Application through different Groups. For example, if a Member belongs to both the Finance Modeler and Finance Admin Groups, and each assigns a different Role (Modeler and Admin), it creates a conflict. In such cases, no Role will be assigned to the Member for that Application. Conflicts are identified directly in the Groups page or in the Application where the conflict exists. - **Groups page**. A yellow warning appears within the Groups page. 1. Click **Review groups** to identify which Groups contain a conflict. 2. Click **View details**, and then click **Members**to view the Role issues. - **Application.** A yellow warning appears in the Application where the conflict exists. - Click **Review Members** to identify which Members contain a conflict. ## Resolve Role conflicts in Group assignment There are three ways to resolve Role conflicts in Group assignment: - **Assign the Member to a single Group.** Ensure the Member is part of only one Group to avoid Role conflicts. - **Review and reassign Application Roles.** Check the Roles assigned through Groups and make necessary adjustments to ensure there is no overlap. - **Manually assign a Role.** Within the Application, manually assign a specific Role to the Member to override any Group-assigned Roles. > [!NOTE] > **ℹ️ Note** > > The best practice for resolving conflicts is to adjust the Group settings. This ensures easier maintenance, any changes will apply to the whole Group.