Managing user groups
This page explains the user group concept in SonarQube Server and how to create and populate them.
User group concept
To manage permissions more easily, users can be managed through groups. The following applies:
- Permissions can be set at both user and group levels.
- A user can belong to several groups within an organization.
- A user's permissions are the sum of all the permissions granted to them individually plus all the permissions granted by the groups they are a member of.
Depending on the authentication method used, automatic group synchronization may be used. For more information, see Authentication and provisioning methods.
Two default built-in groups are used:
- The sonar-users group contains all authenticated users. You can edit the group's permissions, but you cannot delete it or change its name or content.
- The sonar-administrators group contains the default system administrator (admin) that is created during SonarQube Server instance installation. You can manage this group as any other group.
For security reasons, it is highly recommended that the sonar-administrators group's name be changed. If automatic group provisioning is used, this group may be used to gain unauthorized access.
Creating a new user group
- In the top navigation bar, go to Administration > Security > Groups. The Groups page opens with the list of existing user groups.
- Select the Create Group button. The Create Group dialog opens.
- Enter the group name and description.
- Confirm with Create. The new group is added to the list.
- In the Members column, select the list icon to add users to the group: see below.
Adding/removing users to/from a group
You cannot add or remove users from a group if automatic group synchronization is used. For more information, see Authentication and provisioning methods.
To add or remove users to/from a user group:
- In Administration > Security > Groups, retrieve the group.
- In the group's Members column, select the icon. The Users list dialog opens.
- Select the All option.
- Select or unselect the check box to add or remove a user to or from the group.
- Select the Done button.
Changing the name or description of a group
- In Administration > Security > Groups, retrieve the group.
- In the group's Actions column, select the menu icon.
- In the menu, select the Update details command. The Update Group dialog opens.
- Edit the group details and select the Update button.
Deleting a user group
You can only delete a group if it does not result in the removal of all global System Administrators.
To delete a group:
- In Administration > Security > Groups, retrieve the group.
- In the group's Actions column, select the menu icon.
- In the menu, select the Delete command and confirm.
Was this page helpful?