Skip to main content
Groups and team vaults are available on Teams and supported Partner workspaces. Workspace owners and admins manage groups.

​
Create and populate a group

  1. Open Team and choose its groups view.
  2. Create a named group such as Operations.
  3. Open it and use Add member to choose active people or agents.
  4. Select a shared vault and choose Viewer, Editor, or Vault admin for the group.
  5. Verify the members can open the expected vault.
You can also add or remove a group assignment from an individual person’s record. A group does not automatically create a vault. Create a team vault separately in Knowledge → Vault → + New vault, then grant access to the group.

​
How effective access works

Group grants combine with direct vault grants and workspace administration. The strongest applicable role wins. For example, removing someone from a Viewer group does not remove a direct Editor grant they still hold. Workspace owners and admins can administer company and team vaults even if they are not in the group’s membership list. Choose a personal vault for personal knowledge that should not be implicitly available to organization administrators.

​
Boundaries

  • Groups can contain people and service principals, but cannot contain other groups.
  • Groups grant vault access, not workspace Owner or Admin roles.
  • Personal vaults do not accept group grants.
  • There is no automatic Everyone group.
  • Disabling a member removes their group membership; the group’s vault grants remain for its other members.
When auditing access, check direct grants, groups, and the person’s workspace role together. See vault access.