--- title: "Access groups" description: "An access group is a shared access definition – it specifies which readers the holder has access to and attendance tracking on, and with what access mode and validity period. You can assign the group to people, vehicles, or nodes in the organizational structure. Changes to a group affect everyone it is assigned to – directly or through a higher-level entity." url: https://navody.aktion.cz/en/articles/120-access-groups updated: 2026-10-13 language: en alternates: [cs] --- # Access groups An access group is a shared access definition – it specifies which readers the holder has access to and attendance tracking on, and with what access mode and validity period. You can assign the group to people, vehicles, or nodes in the organizational structure. Changes to a group affect everyone it is assigned to – directly or through a higher-level entity. A permission group is a shared access definition—it determines which sensors the holder has access to and attendance at, as well as the access mode and validity period. You can assign a group to people, vehicles, or nodes in the organizational structure. A change to a group affects everyone it is assigned to—directly and through a higher-level node. ## Group list The list shows the **Name**, **Note**, who last **Changed** the record, and the **Change time**. After selecting rows, the bulk actions **Change permissions** and **Delete** appear above the list. The row menu (three dots) offers **Details**, **Edit**, **Copy**, **Record history** and **Delete**. ![The Permission groups administration screen shows a table of permission groups, with Office spaces and Production and warehouse selected. Visible: Permission groups, Access, Search table, Selected (2), Change permissions, Delete.](https://staticfiles.gleap.io/ghelparticle/7SvhN3QCNOvyD6eZnDurlN62rb9zGMSgEeWjaEa9j7bcFHYoEpQwGFy7jhEgZGyT8UWOiIzZvtJ.png) ## Create a group 1. Click **New**. 2. In the **New permission group** window, enter the **Name**, optionally add a **Note**, and click **Create**. 3. The details of the new group will open. Go to the **Permissions** tab and click **Edit permissions**. 4. In the HW structure tree, click the icons in the **Access** and **Attendance** columns—the icon toggles between allowed and denied. Node settings are inherited by child nodes (displayed as “inherited”). You can set the access mode, validity, and node identification in the right-hand panel, which opens when you click a node name. 5. The number of unsaved changes is shown next to the **Edit mode** label. Click **Save**, or discard the changes using the **Discard changes** button. ![The Office Space screen in the Permission Groups section displays a tree table of access and attendance and details for the selected ES-S2 reader. Visible: Office Space, Permissions, Permission Groups, Edit mode, 3 unsaved changes, Save (3).](https://staticfiles.gleap.io/ghelparticle/heeohHk3LXyMuGhhdROLti37JOFMWgTDe0YaNF9cnV0HDIM2i9dlFAObmb9buXJjzmStESfaQMD.png) > **Info:** **Admin tip:** The filter above the tree and the **Search structure** field help you find a reader in a large HW structure. ## Who uses the group On the **Record details** tab, next to **Basic information**, there is a table of **People, vehicles, and nodes with the group**. The **Assignment** column indicates whether the group is assigned **Directly**, or whether the holder inherits it from a higher level of the organizational structure. The **Only with current access** toggle shows only those who have both a valid authorization and a valid identifier as of today. ![The “Office Space” record details display basic information and a table of people, vehicles, and nodes with the group. Visible: Office Space, Record details, Permissions, Basic information, Name, Note.](https://staticfiles.gleap.io/ghelparticle/VQnfPRY8oA2Bg1PEHKdDtLJ649FmYJN0v39iMzSa55bZCf6m6yPayEm22VzPVpVLCKlUBsXMRo5.png) ## Assigning a group to a person 1. Open the person's details, the **Access** tab → **Permissions** and switch the view to **Basic permissions**. 2. Click **Edit permissions**. 3. In the **Access type** field, select **Permission group** and select a group in the adjacent **Permission group** field. 4. Click **Save**. In the tab header, **Permission group** appears as the **Access definition** with the number of readers. The group name in the **Source** item is a link—it opens the group details. Set an individual exception for one person in the **Exceptions** section; this does not change the group definition. ![The People profile for Marek Tomáš is open on the Access tab, showing access-group status, permission controls, a structure access table, and an empty detail panel. Visible: Marek Tomáš, Access, Permission group, 1 alert, 0 identifiers, No records.](https://staticfiles.gleap.io/ghelparticle/Cbulf3lK9WsvYE2vkeCjVAahUfMnXxhfRH3ZxlqL8yO1qseb1gfQnzHHbI9prIDfLYDSfNM3CvV.png) ## Bulk Change of Permissions 1. In the list, select at least two groups and click **Change Permissions**. 2. The **Change Group Permissions** window opens. The first selected group serves as a template—you can edit its permissions before saving. 3. Click **Save**. The definitions of all selected groups will be replaced by the template in their entirety, including nodes you did not touch. ![The “Change Group Permissions” dialog shows a bulk permissions edit for two groups, a hierarchical device table, and an empty detail panel. Visible: Change Group Permissions, Template: Office Spaces · groups selected: 2, Filter, All, Search structure, Sensor name or path.](https://staticfiles.gleap.io/ghelparticle/b4V3yH3EGFV75HDA5SwxEA1h2JyxWwYOUzJ8JbOd03UY36C4SbVYyxANyF1QUlqxznhjDvb6rPz.png) ## Deleting a Group A group that is assigned to someone cannot be deleted. The application will list who it is assigned to, e.g. “The permission group cannot be deleted while it is assigned—to people: 2.”