> ## Documentation Index > Fetch the complete documentation index at: https://docs.cosmosid.com/llms.txt > Use this file to discover all available pages before exploring further. # Manage access to your organisation > This page explains how to manage permissions across the workspaces of a Cosmos-Hub organisation and the levels they contain (studies, analyses and snapshots), and how to add users and create groups to control who holds those permissions. # Roles and permissions Cosmos-Hub 2.0 sets permissions on each object of an organisation, from workspaces down to studies, analyses and snapshots. Permissions set on a workspace cover the objects inside it, and permissions set on a single study, analysis or snapshot cover only that object. Org admins hold every permission on every object, and workspace owners hold every permission on their own workspace. Every other user is a collaborator and holds only the permissions that an org admin or a workspace owner gives them. > [tab] Roles > > | Role | Assigned to | Granted by | Objects covered | > | - | - | - | - | > | **Org admin** | The administrator of a Cosmos-Hub 2.0 subscription | Cosmos-Hub 2.0 | Every workspace of the organisation and the objects inside it | > | **Workspace owner** | The owner of a workspace | Creation of the workspace | The workspace and its studies, analyses and snapshots | > | **Collaborator** | Any other user or group | An org admin or the workspace owner | The objects on which an org admin or the workspace owner sets their permissions | > [tab] Permissions > > | Permission | What it allows | Object types | > | - | - | - | > | **View** | Open the object and see its content | Workspace, study, analysis, snapshot | > | **List** | See the object in the lists of the platform, for example the Workspaces Dashboard or the studies of a workspace | Workspace, study, analysis, snapshot | > | **Create** | Create new objects of this type, for example a new study in a workspace | Workspace, study, analysis, snapshot | > | **Update** | Edit the object, for example rename it or change its content | Workspace, study, analysis | > | **Delete** | Delete the object | Workspace, study, analysis, snapshot | > | **Invite** | Invite new members to the workspace | Workspace | A **User** is any person that is part of a Cosmos-Hub organisation, who can perform actions on the workspaces and related objects depending on the permissions it was granted. A **Group** is a set of users who share the same set of permissions on a workspace and its related objects. User groups are useful to grant a set of users (e.g: members of the same lab, external visitors) permissions at once. New users and groups start without any permission. > [!TIP] > > Give permissions to groups whenever several users need the same access, and set permissions on a single user only for the exceptions. When a new colleague joins a research unit with multiple people working on a workspace, make them of the same group to let them collaborate. # Common Setups | What you want to do | How to do it | | - | - | | Give a lab team the same access to one workspace | [Create a group](#create-a-group) with the team members, then [give the group access](#give-access-to-an-object) to the workspace. | | Add a new colleague to an existing team | [Invite the colleague](#invite-a-user) and assign the group of the team. | | Limit a group to a single study | When you [give the group access](#give-access-to-an-object), select the study instead of the workspace. | | Give one person an extra permission | Keep the person in their group and [set the extra permission on that user](#change-what-one-user-can-do). | | Remove someone who left the lab | [Delete the user](#delete-a-user-or-a-group). | # Users and Groups ## Managing Users and Groups across an Organisation To see the users and groups of your organisation, click the **Organisation** icon at the bottom left of the interface, then open **Users** or **Groups**. The **Users** and **Groups** pages list every member and user groups of the current organisation and allow to manage them. ![Users page listing the members of the organisation and their groups](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/organisation-users.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=9d34dd0404e0bc9325b81c07a720f392) ![Groups page listing three groups with their scope, grants and number of users](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/organisation-groups.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=b6a84d8db7fe75913f48ae88b60f4f08) > [!TIP] > > If you administer more than one organisation, select the one to manage from the **Organisation switcher** dropdown at the top right of each Organisation page. ## The user and group dashboard Clicking on any User or Group in the list to access the User and Group Dashboard, which allows profile and activity auditing, and setting individual permissions etc for a individual user/group. Click a user in the **Users** list, or a group in the **Groups** list, to open its dashboard. ![User Dashboard Header](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/user-dashboard-header.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=21800bae2113c0fe9a2be612c80e2ffc) > [tab] Overview > > **Profile** shows the status of the user and the date they joined the organisation. **Assigned Groups** lists the groups of the user, and **Danger Zone** contains the option to delete the user. For a group, the **Overview** tab shows its name and members, and the option to delete it. > > ![User Dashboard Overview 1](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/user-dashboard-overview-1.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=b37bda67bf0e30276f912d43d31b8657) > [tab] Permissions > > **Permission Overrides** lists the permissions set directly on the user or group. Select an object in the **Object Browser** to see and change the permissions on that object. **Managed at** shows the object where these permissions are set. For a user with full access, the tab shows a message in place of the list, because the user holds every permission. See \[LLM: add link to that section] Permission Centre to learn more about changing user and group permissions. > > ![User Dashboard Permissions 1](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/user-dashboard-permissions-1.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=490f1e53ddf8689223f36abd6a440961) > [tab] Activity > > The **Activity** tab will show the history of actions of the user or group. This feature is not available yet. ### Inviting a new users to an organisation To invite a user, click **Invite User** on the **Users** page, enter their **Email Address**, optionally tick under **Assign Groups** the groups they should be part of, and click **Send Invitation**. ![Invite User dialog with the email address and group fields](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/organisation-invite-user.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=70eb682487f82f614bb1c61c9462647d) ### Create a User Group To create a group, click **Create Group** on the **Groups** page. Enter a **Group Name** and (optional) select **Initial Users** members of that group, and click **Create Group**. *Note: not selecting any user will create a group with only the owner as member of that group.* ![Create New Group dialog with a group name and three selected users](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/organisation-create-group.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=d2d8872377415c588ca112be469e9eb5) Once a group has been created, you will be prompted to set workspaces permissions for it. See [**Setting permissions for Users and Groups**](#setting-permissions-for-an-object) ### Add users to a group Click the group in the **Groups** table and add one or more users from its **Overview** tab. To add a single user to a group, you can also open the user and click **Assign Group** on their **Overview** tab. ### Delete a user or a group ![Delete Test Group](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/delete_test_group.jpg?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=79904e4c1c83b3b7e2cbd362fd97cda0) > [!WARNING] > > Deleting a user cannot be undone. Cosmos-Hub removes the user from the organisation, revokes all their access to it, removes them from every group and deletes the permissions set for them. To delete a user or a Group, open their **Overview** tab, type their email address under **Danger Zone** exactly as shown, and click **Delete User**. To delete several users in one step, tick them in the **Users** table and delete them from there. To delete a group, open the group and delete it from its **Overview** tab. ### Set permission overrides for a single user Set specific permissions for a specific user (**[e.g](https://e.gL):** when they need access that differs from their groups, for example one extra permission on a study). ![User Permission Overrides 1](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/user-permission-overrides-1.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=c91b489f27cf0a1e0c969bddb38dfe4b) On the **Users** page, click the user and open the **Permissions** tab, which lists their **Permission Overrides**, the permissions set directly on that user. Then select the workspace in the **Object Browser** and choose which permissions to change values under **Set Permission**. User permissions can be changed from the **Permission Centre** as well. # Permission Centre The **Permission Centre** is the main control panel to define user and group permissions for all the workspaces and objects of a Cosmos-Hub 2.0 organisation. To access the Permission Centre, click the **Organisation** icon at the bottom left of the interface, then open **'Permission Centre'**. ![Permission Centre with a workspace selected, a user selected in the Principal panel and the workspace permissions of that user](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/organisation-permission-centre.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=89bb803442fa3c159e8dd2d49a06ca38) Permission Centre with the Object Browser, the Principal panel and the permission tables of a group * **Object Browser** lists the workspaces of the organisation. Select a workspace to see and manage who can access it. * **Principal** lists the groups and users that have access to the selected workspace. Click **Manage Access** to add or remove groups and users. * The permission panel shows the permissions of the selected group or user on the selected workspace and on the studies, analysis projects and snapshots inside it. Use the **Set Permission** dropdown to change a permission. For each permission, **Effective** shows the permission that currently applies, and **Source** shows where it comes from. ## Setting permissions for an object **1. Select the Workspace** In the **Object Browser**, select the workspace to manage (e.g: *Skin Atlas Microbiome*). Use **Search objects** to quickly find a workspace by name. **2. Choose a user or a group** In the **Principal** panel, select a group (e.g: *Skin Atlas Microbiome users group*) or\*\* **user** \*\*to open the permission panel and inspect actions that allowed for them on the selected workspace. **3. Update a user or group permissions for a workspace-related object** ![Permission Centre Set Permission 1](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/permission-centre-set-permission-1.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=de26c53bc77476331a4106e1b31fa7dc) Allow the Skin Atlas Microbiome users group to view the studies of the Skin Atlas Microbiome workspace. **4. Save Changes** Click on ' Save Changes' to update permissions ### Update a single user or group permissions Set permissions on a single user when they need access that differs from their groups, for example one extra permission on a study. 1. On the **Users** page, click the user. 2. Open the **Permissions** tab. The tab lists the **Permission Overrides** of the user, that is the permissions set directly for them. 3. In the **Object Browser**, select the object, then choose the values under **Set Permission**. You can make the same change in the **Permission Centre**, by selecting the object and then the user under **Users**. # Organisation Administration To update organisation details, click the **Organisation** icon at the bottom left of the interface, then open **Organisation Administration**. *Note: this section is accessible to Organisation admins only.* Organisation administrators can updated the logo, name or description. ![Organisation Administration page with the logo, name and description fields](https://mintcdn.com/cmbio/ZT3Tn30cNzSqdqeo/images/organisation-administration.png?fit=max\&auto=format\&n=ZT3Tn30cNzSqdqeo\&q=85\&s=511aa99f1817f9831547698d4d96a439) ## Next steps > [card] [Workspaces](https://docs.cosmosid.com/DAP_docs/workspaces.md) > > Organise the data of your teams in workspaces. > [card] [Studies](https://docs.cosmosid.com/DAP_docs/studies.md) > > Create studies inside a workspace. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.