You're correct that groups in
Permit.io are tenant-scoped, which explains why you can only add a subset of users.
(1)
When adding users to a group, you can only add users that belong to the same tenant as the group. Groups operate within tenant boundaries, and tenants represent isolated silos of resources and users.
(2)
Here's what's happening:
*Tenant-Level Isolation:*
• Only users within a tenant can be added to groups in that tenant
(1)
• Tenants are a higher-level organizational structure than groups
(3)
• Each group belongs to a specific tenant, which you specify when creating the group
(1)
*When Creating a Group:*
The required fields include the Group Instance Key and Tenant selection. The tenant you select determines which users are available to add to that group.
*Managing Users in Groups:*
In the Groups UI, you can add users by typing their email addresses in the Users field. However, the available users are limited to those assigned to the same tenant as the group.
*Documentation Resources:*
•
Groups UI - Complete guide on managing groups through the UI
•
Groups API - API reference for programmatic group management
(4)
•
Multi-Tenant Authorization - Understanding tenant structure
(2)
If you need to add users from different tenants, you would need to either:
1. Assign those users to the tenant where the group exists
2. Create separate groups in each tenant