What is the difference between groups and projects?

Groups use group resources, which are standard file directories. Group and project members may come from different teams. Projects restrict users from touching resources; they do not use standard file directories.

To access a resource in projects, you need the following:

• Satisfy project requirements.
• Satisfy project security level.

note

• Tagged projects are considered sensitive information where the system restricts view and download, denies operations and applies restrictions.
• Tagged project VMs are part of the project and restrict moving files outside their drives.
• Tagged groups are entirely cryptographic and, once tagged, include the layer of access control.

To maximize sensitive project restrictions you may want to tag the following:

• Project itself.
• VM using the project with its drives.
• Group that is part of the project.

Shortcut

You can combine groups with projects. By tagging a group to a project, you make that group an exclusive project group.

Groups vs Projects in Vault

Groups And Projects Combined

info

To learn more about the interplay between groups and projects read the Enforcing CUI Restrictions on Hierarchical Data blog.