Groups
Permission requirements
- Vault Files and Directories
- View their files and files shared with them (needed to download)
- View the history of their files (sharing, project tags, deletion)
- Create files (needed to upload)
- Get the keys of their files and files shared with them (needed to download)
- Download the content of files they can access
- View their directories and their groups' directories
- Create directories (also needs “Add items to directories”)
- Delete directories (also needs “Remove items from directories”)
- Groups
- View groups they are a member of
- Get the keys of groups they are a member of (needed to open and share group files)
- Create groups
- Rename groups they own and give ownership to another member
- Add users to groups they are a member of, if the group allows it
- Change other members' group permissions in groups they are a member of
- Remove users from groups they are a member of, if the group allows it
- Delete groups they own
- Projects
- View projects they are a member of
- View the members of projects they are a member of
- Tag what they own with a project they are active in
- Project Management
- Remove project tags of projects they manage
- Edit projects they manage
- Delete projects they manage
- Add users to projects they manage
Groups let you share files with a defined set of collaborators in a single action. Instead of sharing each file individually with multiple users, share it once with a group, and all members automatically receive access.
When to use groups:
- You regularly share files with the same set of people (e.g., a research team, a lab group)
- You want new files to be automatically accessible to all group members when shared with the group
- You need to manage access collectively: adding a member to the group grants access to all group-shared files; removing a member revokes it
Groups can also be tagged with a project. Group members must be active members of that project to access the group's files.
Access Group Directories
- Go to the Vault icon in the top left panel.
- Go to the Groups panel on the right.
- View all the groups you are a member of in the right panel.
- The Groups panel lists only the groups you are a member of, whatever your role.
- Users with admin or super-admin roles can view all groups in the system from Management. See View Groups from Management.
View Groups from Management
- Go to the Management icon in the top left taskbar.
- Navigate to the Users section.
- Click the Groups section in the top left panel.
- View all existing and past groups in the system.
Only users with admin or super-admin roles can access groups from the Management section.
View Your Group Members from the Vault
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group whose members you want to view.
- In the new window, view the list of group members on the right.
The members table has the columns Name, Email, Added, Number of Permissions and Role, and you can sort and filter every column. The Role column reads Owner (with a crown) for the group's owner, Manager for members who hold the Add Members group permission, and Member for everyone else. Selecting a member shows a card with their name, email and "Joined date", above their group permissions. With nobody selected, the panel reads "No group member selected." and "Select a group member to edit their permissions."
Create a Group
- Go to the Vault icon in the top left panel.
- Go to the Groups panel on the right.
- Click the Create group button.
- In the pop-up, enter the group name.
- Click Create.
- In the new pop-up, select the user to add to the group.
- Select their user permissions in the group.
- Click Add to group.
- The box Add members to this group after creation is checked by default. Untick it to create the group without adding anyone, and skip steps 6 to 8.
- You may be asked to enter your password upon group creation.
The Name field shows a character counter and follows these rules:
- Required: the name cannot be empty. Message: "You must enter a name".
- Length: the name has at most 80 characters. Message: "May not exceed 80 characters".
- Characters: the name cannot contain any of
/\|":*?<>{}or a NUL character. Message:May not contain any of /\|":*?<>{} or NUL. - Unique: no other group of yours has the same name. Message: "Conflicts with another group".
When you create a group you are automatically assigned the group owner role.
Create a Group Tagged by a Project from the Vault
- Go to the Vault icon in the top left panel.
- Go to the Groups panel on the right.
- Click the Create group button.
- In the pop-up, enter the group name and select the Project to tag the group with. The hint reads "Group members will be required to meet this project's restrictions in order to access group files".
- Click Create.
- In the new pop-up, select the user to add to the group.
- Select their user permissions in the group.
- Click Add to group.
- You must be an active member of the project to create a group tagged with it and to add members to that group.
- Any user can be added to a project-tagged group, but group members must satisfy the project requirements (be active members of the project) to access the group's files.
Manage a Group
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the menu next to the appropriate group.
- Select Open overlay.
- In the overlay, view the group details.
Group members can be managed by a group owner or by a group member with group permissions granted by the owner.
Group permissions
Group permissions are set per member, inside one group. They are not your account permissions: an account permission lets you do something in any group that allows it, and a group permission is how a group allows it. The following table describes the seven group permissions, in the order they appear in the overlay. Select all above the checkboxes ticks all of them.
| Permission | What it allows |
|---|---|
| Add Members | Add other users to the group. |
| Remove Members | Remove users from the group. |
| Change Permissions | Change the group permissions of themselves and other members. |
| Add Directory Entries | Add entries to the group's folders that point to existing files, which includes uploading and sharing files into the group. |
| Remove Directory Entries | Remove entries and folders that the group owns. |
| Create Directories | Create new folders in the group's file system. |
| Modify Project Tag | Change the project tag of the group and its folders. |
The owner of a group may perform actions within the group regardless of their group permissions.
Add a New Member to a Group
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, click the Add a new member section in the left panel.
- In the pop-up, select the user to add to the group.
- Select the user's permissions in the group.
- Click Add to group.
You cannot add members to a project-tagged group unless you are an active member of the group's project.
Add a new member appears when you have the account permission Add users to groups they are a member of, if the group allows it and you own the group or hold its Add Members permission. An Admin role alone does not give it.
The pop-up is titled "Add a user to group". Type in the User field ("Search for a user...") and pick a user from the list, which shows only users you can see. The new member's Permissions start unticked. If you cannot change member permissions in this group, the pop-up says "You do not have permission to change member permissions within the selected group." and the member joins with no group permissions. Click Close to cancel.
You can also add a user from the Users panel: open the ⋮ menu next to the user and select Add to one of your groups. That pop-up is titled "Add user to your group" and asks you to pick the group.
Change Group Members' Permissions
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, select the user you wish to change permissions for.
- On the left panel tick or untick the permissions as needed.
- Once done, click Close.
Each tick saves at once and shows "Updated permissions for name", or "Failed to update permissions for name". There is no Save step. The owner's checkboxes are always disabled, with the text "The owner of a group may perform actions within the group regardless of their group permissions."
You can change permissions when you have the account permission Change other members' group permissions in groups they are a member of, and you own the group, have the Admin role, or hold the group's Change Permissions permission. Otherwise the checkboxes are disabled.
Promote a Group Member to Owner of the Group
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, select the user you wish to promote to group owner.
- Click Promote to owner button in the top left panel.
- In the pop-up, click Yes to confirm.
The owner of the group may perform actions within the group regardless of their group permissions.
When you promote a member to group owner, you lose all your permissions within the group, not only ownership. You will no longer be able to delete the group, but you can leave it. The promoted user, as the new group owner, gets full permissions and the ability to delete the group, but cannot leave it unless they transfer ownership.
The pop-up is titled "Transfer ownership of group to member?" and reads "Transferring ownership to another member of the group will strip all your permissions within the group and will immediately grant them full permissions. You will no longer be able to delete the group but you can leave it. As the owner, they gain the ability to delete the group, but they will no longer be able to leave the group unless they transfer ownership."
Make a Group Member a Group Manager
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, select the group member you wish to promote to group manager.
- Tick the Add Members permission in the left panel.
- View the role change under the Role column on the right.
Remove a Group Member
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, select the user you wish to remove from the group.
- Click Remove from group button in the left panel.
- In the pop-up, click Yes to confirm.
The pop-up is titled "Remove user from group?". Remove from group never appears on the owner's row. It appears when you have the account permission Remove users from groups they are a member of, if the group allows it, and you own the group, have the Admin role, or hold the group's Remove Members permission. If you select your own row, the button starts Leave a Group instead.
Removed group members lose access to files shared with them solely through the group. They can no longer see the group file tree or interact with the group in any way.
Rename a Group
Method one:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the menu next to the group you wish to rename.
- Select Rename.
- In the pop-up, enter the new group name.
- Click Rename.
Method two:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, click the Rename group section in the left panel.
- In the pop-up, enter the new group name.
- Click Rename.
The pop-up is titled "Rename group" and has one field, New Name, with the same rules as the name of a new group. Keeping the current name shows "Same name as before", and a failure shows "Failed to rename group". Renaming needs the account permission Rename groups they own and give ownership to another member, and you must own the group.
Change the Project in a Group
Method one:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the menu next to the group whose project you wish to change.
- Select Change project.
- In the pop-up, select the project.
- Click Classify (the button reads Declassify when you select a parent project).
Method two:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, click the Change project section in the left panel.
- In the pop-up, select the project.
- Click Classify (the button reads Declassify when you select a parent project).
- You must be an active member of both the group's current project and the new project. Without the override option described below, you can only move a group to a subproject of its current project (Classify) or to a parent project or no project (Declassify).
- Multiple groups can share the same project tag.
- Group members who are not active members of the project cannot access the tagged group's files.
Forcefully Change the Project in a Group
Method one:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the menu next to the group whose project you wish to change.
- Select Change project.
- In the pop-up, tick Use my permission to override rules, re-tag resources with any visible project, regardless of current project relations.
- Select the project to tag the group.
- Click Force change with admin privilege.
Method two:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, click the Change project section in the left panel.
- In the pop-up, tick Use my permission to override rules, re-tag resources with any visible project, regardless of current project relations.
- Select the project to tag the group.
- Click Force change with admin privilege.
Remove Project from a Group
Method one:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the menu next to the group whose project you wish to change.
- Select Change project.
- In the pop-up, select No project (unlocked).
- Click Declassify.
Method two:
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the group to open the group overlay.
- In the new window, click the Change project section in the left panel.
- In the pop-up, select No project (unlocked).
- Click Declassify.
Share Files with a Group by Drag and Drop
- Go to the Vault icon in the top left panel.
- In My Files or one of your folders, select the files you want to share.
- Drag them onto the group in the Groups panel on the right.
- In the Share n files? pop-up, set the Expiration and Restrictions.
- Click Share.
The Expiration field starts at the system's default expiration. Its hint reads "Clear this field to share with no expiration". A date that is not after today shows "Must be after today", and text that is not a date shows "Enter a valid date". The files are added to the group's folder and shared with every member. Files tagged with a parent project of the group's project are re-tagged with the group's project. A file tagged with a project unrelated to the group's shows the warning "name is tagged with an unrelated project". Members are notified: with up to three files they get one notification per file, and with more they get one summary.
You can also right-click a group in the Groups panel to open its ⋮ menu.
Download Group Content
bulk-action
- Go to the Vault icon in the top left panel.
- Click the Group Directories section on the left panel.
- Select the group file(s) or directory(ies) you wish to download.
- Click Download in the top center panel.
- In the prompt, preview the file and directory structure.
- Select the destination of your download.
- Click Download.
Downloading a group's contents removes the group's encryption. It is your responsibility to secure the files.
- You may be asked to enter your password when changing the download destination.
- You can set a default download destination for groups by clicking Set as default after making your selection.
Compute Disk Usage of a Group
bulk-action
- Go to the Vault icon in the top left panel.
- Click the Group Directories section on the left panel.
- Select the group(s) for which you want to compute the disk usage.
- Click the Open full menu button in the top center panel.
- Select Compute disk usage.
Delete a Group
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the menu next to the group you want to delete.
- Select Delete.
- In the pop-up, click Yes to confirm.
The pop-up is titled "Delete group?" and reads "Deleting a group is irreversible. Members will lose access to shared files unless they have otherwise been granted access. Additionally, the group file system will be destroyed. Are you sure you want to delete group?" If deleting fails, the message "Failed to delete group" appears.
Only the group owner can delete a group. Admins and Super-admins who are members of the group, and Sub-admins who are members and manage the group's project, can also delete it. Other members can only leave the group.
Leave a Group
- Go to the Vault icon in the top left panel.
- Locate the group in the Groups panel on the right.
- Click the menu next to the group you want to leave.
- Select Leave group.
- In the pop-up, click Yes to confirm.
You can only leave a group if you are a group member. If you are the owner, you can only delete the group. Leave group also needs the account permission Remove users from groups they are a member of, if the group allows it.
The pop-up is titled "Leave group?" and reads "Someone who has permission within the group will need to re-invite you for you to access resources shared with the group (but not you) again." If leaving fails, the message "Failed to leave group" appears.