> For the complete documentation index, see [llms.txt](https://docs.guardware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.guardware.com/security-groups/security-groups.md).
# Security Groups
Security Groups help you organise users into groups, such as by department, team, job role, or any other structure that suits your organisation. They can also be used to apply policies and filter dashboard data.
Security Groups can be created manually or imported from Active Directory. A user can belong to one or more Security Groups.
In GuardWare PROTECT, Security Groups control access to protected files. When you protect a file using GuardWare PROTECT, only users in the selected Security Groups can access it. Users who are not members of those groups are automatically restricted. New users who install the PROTECT Agent and sign in successfully are automatically added to the default *All Users* Security Group.
In GuardWare INSIGHT, Security Groups help you filter and view data for specific sets of users, making it easier to monitor activities and focus on the areas most relevant to users' role. Instead of repeatedly choosing the same individual users, you can select a Security Group to view data for the users you are interested in.
### Add a Security Group
1. Log in to the GuardWare Management Console and navigate to **Security Groups**.
2. Click **+New Security Group**. You’ll see an option to create a security group **manually** or from **AD**.
3. To create manually:
1. Select **Manually**.\
2. **Security Group Name:** Enter a descriptive name for the group that reflects its purpose.
3. **Description:** Enter a summary of the group’s role or scope. This helps other administrators understand the intended use.
4. **Encryption Mode:** Select how files can be decrypted:
1. **Online**: Decryption is allowed only when the user is connected to the network.
2. **Offline:** Decryption is allowed even when the user is not connected to the network.
5. **Security Group Type:** Select how membership is managed:
1. **Private:** Only members and administrators can see the group; it’s hidden from non-members.
2. **Public:** Visible to all users, and anyone can see the group.
6. Click **Save**.
4. To import from AD:
1. Select **From the AD**.
2. Search for the required AD group. Matching Security Groups appear in the **SECURITY GROUPS** list.
3. Select the AD group. The selected group appears in the **Selected Security Group** panel on the right.
4. Click **Save**.\
The group will appear in the **Security Group List**. You can view the list either by the Group name or by users.
### Assign Users to a Security Group
1. Navigate to **Security Groups**.
2. To assign **INSIGHT users**:
1. Search for the security group and click **+Assign INSIGHT Users** in the **ACTIONS** column.
2. Search and select the users to add, and click **Assign Users**.
3. To assign **PROTECT users**:
1. Search for the security group and click **+Assign PROTECT Users** in the **ACTIONS** column. You’ll see the list of all users, including AD and external users.
2. Search and select the users to add, and click **Assign Users**.
External users appear on the list only after they have accepted the invitation, installed GuardWare PROTECT, and logged in successfully. For details on how to invite external users, see Invite External Users.
### Edit a Security Group
1. Navigate to **Security Groups** and search for the security group to edit.
2. In the **ACTIONS** column, click the **Edit** icon.
3. Update the required details and click **Save**.
### Delete a Security Group
Deleting a security group immediately removes all assigned users from the group and revokes any permissions granted through it.
For example, when a project is completed and all related files should no longer be accessible, deleting the project’s security group instantly removes access for all members.
To delete a Security Group:
1. Navigate to **Security Groups** and search for the security group you want to delete.
2. In the **ACTIONS** column, click **Delete**.
3. Click **Delete** in the confirmation alert.
{% hint style="info" %}
The **All Users** default group cannot be deleted.
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.guardware.com/security-groups/security-groups.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.