Create a group to manage entities
A group is a collection of related or similar profiles. For example, you can organize projects according to location or users by access, which allows better management of entities. You can organize profiles as groups based on how your business operates.
To learn more about how groups work, see Managing entities by grouping profiles.
- Step 1:Create a subject group along with the booleans
isIdentityGroupandroleAware - Step 2:Associate owner, admin, editor, and viewer to the subject group
- Step 3:Create an object group without the booleans
isIdentityGroupandroleAware. - Step 4:Associate objects with the object group
- Step 5:Manage the subject/object groups based on the roles.
Non-Identity entities are restricted from having a role while it is added to a group. If roleAware is false for a group, it means that the identity entities attached to the group may/may not contain roles. A role (if present) should be any one of: admin, editor, owner, or viewer.