Groups

Documentation Index

Fetch the complete documentation index at: https://docs.runorion.com/llms.txt

Use this file to discover all available pages before exploring further.

Groups let you organise users into cohorts that share access to the same set of projects, data sources, Knowledge Base pages, and Integrations. Use them to model teams, departments, end customers, or any other grouping that maps to a set of people who should see the same resources.

​

When to use Groups

​

Accessing Groups

Group management lives alongside user management in Settings → Manage Users. The page has two tabs: Users and Groups.

​

Creating a Group

From the Groups tab, click + New Group. Give the group a clear name and an optional description. If a non-admin user creates a group, they automatically become its first Group Admin. Tenant Admins who create groups manage them via their tenant role and are not added as members.

​

Naming Groups with Prefixes

When creating a group, the modal offers the option to select a prefix or choose no prefix. Prefixes are a first-class naming tool in Orion — they attach a shared label to all related groups so they sort and display together. For example, if you are provisioning groups for several customers, you might first create a top-level group called Verizon, then create further groups with that prefix: Verizon — Sales, Verizon — Marketing, Verizon — Operations. When your list of groups grows, every Verizon-related group stays together.

​

Group Roles

Each user has a role within each group they belong to. A group role only controls what someone can do inside that group — it is separate from and independent of their tenant role.

​

Roles at a Glance

The table below covers all six roles across both levels — tenant and group. Tenant roles apply across the entire Orion instance; group roles apply only within the specific group. † A Group Analyst automatically becomes Group Admin of any group they create. ‡ Project owners can extend Viewer access to allow data queries on a per-project basis in Project Settings.

​

Users with roles across multiple groups

Tenant Admins always have full visibility across every group. For everyone else — tenant Analysts and Viewers — group roles can vary between groups. A user can simultaneously be:

• A Group Admin in a group they created or were promoted in
• A Group Analyst in a colleague’s group they were invited to contribute to
• A Group Viewer in a third group where they only need read access

This means two users with the same tenant role may have very different effective access depending on which groups they belong to and what roles they hold there. When troubleshooting unexpected access, check both the user’s tenant role and their role within each relevant group.

​

Managing a Group

Click any group from the Groups tab to open its detail view. From here you can manage everything the group has access to using the tabs along the top. The header shows who created the group and when. Click the group name or description to edit them inline.

​

Members

The Members tab lists everyone in the group along with their group role.

​

Adding existing users to a group

Click Add member to open the member picker. The list shows users from your tenant who aren’t already in the group. Pick the role they should have within the group, then add them.

​

Inviting new users directly into a group

If the person you want to add isn’t in your tenant yet, click Invite by email at the bottom of the picker. The invitee will receive an invitation email and, on first login, will automatically be added to this group with the role you selected.

​

Projects

The Projects tab lists the group’s projects. Everyone in the group can access them with permissions matching their group role. Click Add project to add more projects to the group. The picker shows projects you have access to. A single project can belong to more than one group — useful for shared work that spans multiple teams.

​

Data Sources

The Data Sources tab controls which data sources are available to group members. Members can use any of the data sources you enable here when working in the group’s projects.

​

Knowledge Base

The Knowledge Base tab controls which Knowledge Base pages and folders the group can use. You can select individual pages or whole folders.

​

Integrations

The Integrations tab controls which integrations the group has access to.

​

How users get access to a project

A user can be given access to a project in two ways:

1. Through a group — they’re a member of a group that the project belongs to. Their permissions match their role in the group.
2. Directly — they were invited to the project individually from the project’s Share menu, independent of any group.

The two methods work side by side. Removing someone from a group doesn’t cancel any direct invite they have, and removing a direct invite doesn’t remove them from the group. The Project Settings modal shows which groups currently have access to the project, alongside its other settings.

​

Deleting a Group

To delete a group, open it and click Delete group in the upper-right corner. The confirmation dialog summarises what will happen:

• Members lose access to anything they only had through this group. They keep any direct project access they were granted individually.
• Projects that are only used by this group can either be transferred to the group’s Admins (who keep access individually) or deleted along with the group.
• Data Sources, Knowledge Base pages, and Integrations are not deleted — they simply leave the group.

If you choose to delete a project alongside the group, you’ll be asked to type the project’s name to confirm.