> For the complete documentation index, see [llms.txt](https://docs.sprinkledata.com/product/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sprinkledata.com/product/user-management/groups.md).
# Groups
Sprinkle gives you the flexibility to be in control of your data, and manage access & permissions of groups of users.
Managing, assigning & adjusting various permissions for a huge number of users can be a tedious task. Hence, use groups to efficiently manage access of similar kinds of users.
To quickly get you started with managing the accessibility, Sprinkle has default groups created.
### Default Groups
#### **Administrator** :shield:
The Admin has complete access to the tool and has no restrictions. They are in charge of administering and facilitating everything on the platform. Admins can be senior members of the data team who has detailed knowledge of the various data systems. The admin can manage other users on the platform and their access.
#### **Data Team** :woman\_technologist::man\_technologist:
Their permissions are similar to an admin's, except for the administrative permissions. On the platform, they have access to everything they need to build pipelines, models, reports, dashboards, and more. They can create new datasets from data sources, build models, SQL Transforms, Reports, SQL explore, etc. The group can be used to manage and provide access to Data Engineers and Data Analysts.
#### **Business Team** :man\_office\_worker::woman\_office\_worker:
This group of users can create and view reports and dashboards. In addition to consuming data assets, users can also create them using self-serve analytics features.
#### Viewers :eyes:
They have view-only permissions on reports and dashboards.
#### **API\_Access Grp** :robot:
Made to provide API access, this group has permissions to view [SQL Explore](broken://pages/nq2Gv4qgvE2GTvt8b5YK), [Reports](broken://pages/Hzy6JZnG8PkHQD4M39M9), and Model functionalities, along with the create and edit permissions on [SQL Transform ](/product/transforming-your-data/sql-transform.md)and [ Pipelines ](broken://pages/8cigMBEym5xD0L9hN22T).
Default permissions of these default groups are covered in the permissions section [below](#group-permissions-snapshot).
### Create New Group
Sprinkle provides an option to also create groups according to the customized needs of a group of users in the organization.
To create a new group, through the left navigation panel, :mouse\_three\_button:click on **Admin** -> **Access Management** -> **Groups**. :mouse\_three\_button:Click on **New Group**.
## What are Groups made of?
### **Members** :people\_holding\_hands:
Admin can add members to the group easily, just click on Add to get started. From the available drop-down list of the users in Sprinkle, Admin can select the users to add them to the group.
### Permissions
Using the easy & intuitive UI, admins can easily manage the permissions of various groups across the various modules in Sprinkle. Below is a snapshot of the default permissions for the users in various groups.
#### Group Permissions - Snapshots
#### **Admins** :shield:
#### **Data Team** :woman\_technologist::man\_technologist:
#### **Business Team** :man\_office\_worker::woman\_office\_worker:
#### Viewers :eyes:
#### **API** :robot:
### Folders
Along with permissions to various modules, the admin can also manage the access of data to the users in the groups through folders.
Navigate to the folders tab and **Add Folder**, in case you want to provide additional access to a specific folder to the users in the group. Read more about folders [here](/product/user-management/folders.md).
### **Row-level Security**
Row-level security lets you manage the row-level access of the models. It lets you restrict users' access only to the relevant rows of data in the table. For example, you can restrict users in Karnataka to access the sales data only relevant to Karnataka from the sales table.
### :tools:Steps to Use Row-level Security
#### :digit\_one:Define RLS Attribute - Admin Users
The **Row Level Security (RLS)** feature allows you to define the columns on which an RLS attribute should be applied. Once configured, the selected column can be used to control data access at the row level.
Creating an RLS Attribute
To create a new RLS attribute:
1. Navigate to **Access Management → Row level security**.
2. Click **+ New RLS attribute** in the top-right corner.
3. A modal opens asking you to enter the **Attribute Name**.
4. Enter a unique and meaningful name for the RLS attribute.
5. Create the attribute.
Once created, the RLS attribute will be available in the **Row-level security attributes** list.
### Steps to Add an RLS Attribute
1. Navigate to **Admin -> Access Management → Row level security** and open the required RLS attribute.
2. In the **Table assignments** section, enter the table or schema name in the search box.
3. Click **Search tables**.
4. Select the required table, A modal will open
5. Select RLS column on which you want to apply the RLS.
6. For Entity Access -> Choose whether this RLS mapping applies to every entity associated with the table or only to entities you select.
7. Click **Add Table**.
The RLS attribute is now assigned to the selected column of the table.
### Example
For example, if the RLS attribute **Stlname** needs to be applied to the `attributes_type` column of the `ds_salesforcepagetest_table_2` table:
* **Table:** `ds_salesforcepagetest_table_2`
* **Schema:** `sprinkletest`
* **Column:** `attributes_type`
Search for `ds_salesforcepagetest_table_2` and click **Search tables**. The table will appear in the table assignments list.
Click **Edit** for the table, select **`attributes_type`** as the column, and click **Save**.
The **Stlname** RLS attribute is now applied to the `attributes_type` column of `ds_salesforcepagetest_table_2`.
## Assigning RLS Values
Once an RLS attribute has been configured for the required table and column, you can assign values to **groups** or **individual users**.
### Assign RLS Values to a Group
1. Navigate to the **Groups** tab within the RLS attribute.
2. Click on +Assign Group.
3. Select the required group from dropdown.
4. Assign the appropriate value for the RLS attribute.
5. Click on Assign.
The assigned RLS value will apply to users who are members of the group.
### Assign RLS Values to a User
1. Navigate to the **Users** tab within the RLS attribute.
2. Click on +Assign Group.
3. Select the required user from dropdown.
4. Assign the appropriate value for the RLS attribute.
5. Click on Assign.
The assigned RLS value will apply directly to the selected user.