---
title: Security Groups
slug: security-groups
docTags:
createdAt: 2025-11-14T23:00:34.996Z
---
# All About Security Groups
A Security Group is a designated group of Users who have permission to see specific contracts or features in SHI One. Security Groups **must** be set up in order to complete the onboarding process.
***
:::hint{type="info"}
**Note**: Only **Admins **can set up Security Groups.
:::
- Admins can create and assign permissions for specific contracts to different Security Groups
- Admins can add new and existing users to Security Groups
- Users must be assigned to a Security Group before they can view any data in SHI One
- Admins can view and access all data in SHI One by default
- All users must be assigned to a Security Group in order to submit Support Requests
- Users can only submit Requests for the contracts, permissions, and accounts associated with their assigned Security Group(s)
- Admins can designate a Security Group Manager for each Security Group; that Security Group Manager can add existing users to that specific Security Group
- Admins and Security Group Managers will be notified about any Security Group configuration issues that may lead to users being unable to submit Support Requests
- Clicking on the notification will bring you to that Security Group's page
:::hint{type="warning"}
If a user cannot see data in SHI One, it means they have not been added to a Security Group. Users can only view data for the contracts, permissions, and accounts associated with their assigned Security Group(s).
:::
***
# Security Group Setup
## Step 1: Creating a Security Group
1. In the left sidebar, navigate to **Settings > Security Groups**
2. **First Time Users**: Scroll down to the bottom of the page and click **Enable Security Groups**.
3. In the **OPTIONS **column, click on the plus icon (+) to create a Security Group. A dialog box appears.
4. Enter a name for the Security Group.
5. Click **CREATE**.
***
## Step 2: Adding Contracts
1. After clicking **CREATE**, click on the name of the Security Group you just created.
2. Click on the **CONTRACTS **tab.
3. Click **+ ADD CONTRACTS**. A dialog box appears.
4. Select the contracts in the left column that you want to assign to this Security Group.
5. Click on the right arrow **> **button to move those contracts to the right column.
6. Click **ADD CONTRACTS **to save your selections.
***
## Step 3: Setting Permissions
1. In the **CONTRACTS **tab, click the **blue gear icon** to the right of each contract. A dialog box appears.
2. Choose which **Request Categories **will be available to users in this Security Group.
3. Select the subscriptions or accounts this Security Group can access in the left column.
4. Click the right arrow button **>** to move the subscriptions or accounts to the right column.
5. Click **Save**.
6. Click on the **PERMISSIONS **tab.
7. Check the box next to each permission that should be assigned to all users in the Security Group.
::::VerticalSplit{layout="middle"}
:::VerticalSplitItem
::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/Nsa1X8OBXiwptiESeB38w_security-groups-setting-permissions.png" size="80" width="1175" height="905" position="center" darkWidth="1175" darkHeight="905" showCaption="false"}
:::
:::VerticalSplitItem
:::
::::
***
## Step 4: Adding and Removing Users
1. Click on the **Users** tab
- **Add a User**
1. Click **+ ADD USERS**. A dialog box appears.
2. Select the users in the left column that you want to assign to this Security Group.
3. Click on the right arrow > button to move the users to right column.
4. Click **ADD USERS **to save your selections.
- **Select a Role**
1. Select the user's role in the drop-down menu. You can select either the **Manager** or **Member** role.
- **Note**: The default role is **Member**. A **Manager **has the ability to manage users, contracts, and permissions within a Security Group.
- **Remove a User**
1. Click on the trash can icon beside a user's name to remove them from the Security Group.
