Managing entities by grouping profiles

A group is a collection of related or similar profiles. For example, you can organize projects according to location or users by access, which allows better management of entities. You can organize profiles as groups based on how your business operates.

Profiles provides supports subject entity grouping or object entity grouping.

• Subject group - A subject group (sometimes referred to as an identity group) contains profiles that are authenticated from Trimble Identity, like a user, application or device.
• Object group - An object group (sometimes referred to as a non-identity group) can contain either identity or non-identity profiles.

To learn how to implement groups, see Create a group to manage entities.

Characteristics of groups in Profiles

An instance of a subject group is for only identity instances such as users, applications or devices; however, an instance of an object group is for both identity and non-identity instances.

An identity instance when added to a group can be assigned with a role. The valid roles supported are owner, admin, editor, and viewer.

Profiles currently does not support nested groups.

This illustration shows the group workflow.

Access rights of subject groups

A user/application/device as the subject (or caller) of a group can perform the following operations based on the role assigned.

Role	Description
OWNER	Perform read, list, update, delete, associate and dissociate operations in a group, can also associate, dissociate and list users/applications/devices of a group.
ADMIN	Perform read, list, update, delete, associate and dissociate operations in a group.
EDITOR	Perform read, list, associate and dissociate operations in a group.
VIEWER	Perform read and list operations in a group.

Relations can be created with a subject group based on the role.