---
title: "Managing User Groups"
description: "With user groups, you can combine Consolidation & Financial Planning users and assign shared permissions to all members at once, instead of configuring each user individually."
source_url: https://support.lucanet.com/en/documentation/administration/user-management/user-groups
language: en
last_updated: 2026-06-18
---
# Managing User Groups

## Overview

With user groups, you can combine Consolidation & Financial Planning users and assign shared permissions to all members at once, instead of configuring each user individually. You can create and manage user groups in **Administration | User management | User groups**.

For each user group, you can:

- Define **permissions** for the data model (Workspaces, Data access, and Other permissions).
- **Transfer** the group's permissions to individual users or other user groups, optionally for a limited period.
- **Receive** permissions from other user groups (inheritance).
- Review the **change log** of the group.

{% info-box %}
Currently, user groups manage permissions for **Consolidation & Financial Planning** and are available to platform administrators with the **Administrator** or **Master** role for Consolidation & Financial Planning. For users who only have the **Observer** role for user management, the **User groups** menu item is not displayed. All settings made for user groups on the Lucanet CFO Solution Platform are automatically synchronized with Lucanet.Financial Client, provided that the platform administrator is also assigned the **Master** role in Lucanet.Financial Client.
{% /info-box %}

## Creating a User Group

To create a user group:

{% stepper %}
{% stepper-step %}
Navigate to **Administration | User management | User groups**.
{% /stepper-step %}
{% stepper-step %}
Click **Create new user group**. The **Create User Group** panel is displayed as follows, for example:

'Create User Group' side panel

{% /stepper-step %}
{% stepper-step %}
Enter a name in the **User group name** field. The name is mandatory and must be unique.
{% /stepper-step %}
{% stepper-step %}
Click **Save**.

The user group is created and displayed in the list of user groups. You can now configure the group's permissions and assign users (see [Configuring User Group Permissions](#configuring-user-group-permissions)).
{% /stepper-step %}
{% /stepper %}

## Working with the User Groups List

The list of user groups displays the following information:

| Column | Description |
|---|---|
| User group | The name of the user group |
| Users and user groups | The number of users and user groups that the group's permissions are transferred to |
| Last edit date | The date and time the user group was last changed |

By default, the most recently edited user groups are displayed at the top of the list. You can filter the list by user group name and sort by last edit date.

To manage an existing user group, open the menu of the icon in the group's row:

- **Edit user group** opens the **Edit User Group** panel (see [Configuring User Group Permissions](#configuring-user-group-permissions)).
- **Change log** opens the change log of the group (see [Viewing the Change Log of a User Group](#viewing-the-change-log-of-a-user-group)).
- **Delete user group** deletes the group after you confirm.

To delete several user groups at once, activate the check boxes in front of the relevant groups and click **Delete user groups** at the top right.

## Configuring User Group Permissions

To configure a user group, select the user group in the list to open the **Edit User Group** panel. In addition to the **User group name**, the panel provides the following tabs:

| Tab | Description |
|---|---|
| Workspaces | Defines which workspaces and elements the group's permissions apply to |
| Data access | Defines which values the group can display, enter, change, or delete |
| Other permissions | Defines which administrative activities the group can perform and what additional information it can access |
| Permissions transferred | Transfers the group's permissions to users or other user groups (see [Transferring Permissions](#transferring-permissions)) |
| Permissions received | Receives permissions from other user groups (see [Receiving Permissions](#receiving-permissions)) |

To define permissions, open the **Workspaces**, **Data access**, or **Other permissions** tab and activate the **Read** and/or **Write** check boxes in the **My set permissions** column for the relevant areas. Permissions inherited from other user groups are displayed in the **Inherited** column.

The **Workspaces** permission tab is displayed as follows, for example:

'Workspaces' permission tab of a user group

{% info-box %}
The permission categories (**Workspaces**, **Data access**, **Other permissions**) and the permission symbols work exactly the same way as when you define permissions for an individual user. For a description of the categories and symbols, see [Defining User Permissions for Data Model Roles](https://support.lucanet.com/en/documentation/administration/user-management/users/defining-user-permissions.md).
{% /info-box %}

## Transferring Permissions

On the **Permissions transferred** tab, you can transfer the user group's permissions to individual users or to other user groups, optionally for a limited period. The tab is displayed as follows, for example:

'Permissions transferred' tab

To transfer the group's permissions:

{% stepper %}
{% stepper-step %}
In the **Edit User Group** panel, open the **Permissions transferred** tab.
{% /stepper-step %}
{% stepper-step %}
Click **+ Add row(s)** and select the **user or user group** that should receive the permissions.
{% /stepper-step %}
{% stepper-step %}
(Optional) Limit the validity period by entering a date in the **Assigned since** and **Assigned until** columns. If you leave **Assigned until** empty, the permissions are assigned with no end date (Unlimited).
{% /stepper-step %}
{% stepper-step %}
Click **Save**.
{% /stepper-step %}
{% /stepper %}

{% warning-box %}
A user group's permissions are added to a user's own permissions, but a user can never receive more permissions than their **user role(s)** allow. For example, a user with the **Observer** role keeps read-only access even if a user group transfers write permission to that user.
{% /warning-box %}

## Receiving Permissions

On the **Permissions received** tab, a user group can inherit the permissions of one or more other user groups. The columns work the same way as on the **Permissions transferred** tab, except that only **user groups** can be selected. The tab is displayed as follows, for example:

'Permissions received' tab

To receive permissions from another user group:

{% stepper %}
{% stepper-step %}
In the **Edit User Group** panel, open the **Permissions received** tab.
{% /stepper-step %}
{% stepper-step %}
Click **+ Add row(s)** and select the **user group** whose permissions should be inherited.
{% /stepper-step %}
{% stepper-step %}
(Optional) Limit the validity period by entering a date in the **Assigned since** and **Assigned until** columns. If you leave **Assigned until** empty, the permissions are assigned with no end date (Unlimited).
{% /stepper-step %}
{% stepper-step %}
Click **Save**.
{% /stepper-step %}
{% /stepper %}

{% warning-box %}
Changes to user group permissions take effect only after the affected users have logged out and logged back in.
{% /warning-box %}

## Viewing the Change Log of a User Group

To review the changes made to a user group, click the icon in the group's row and choose **Change log**. The **Change Log** dialog is displayed as follows, for example:

'Change Log' dialog for a user group

The change log lists actions such as a user group being created or edited, elements (users or user groups) being added to or removed from the group, and the user group itself being added to or removed from another user group. Depending on the action, the **Name**, **Element**, **Group**, and **Parent** columns identify the affected user group, member, or related group. You can sort and filter the **Time**, **User**, and **Action** columns.

{% info-box %}
Changes to read and write permissions are not recorded in the user group change log.
{% /info-box %}