# Manage Group Access

The Roles tab in the group sidebar lets you view and manage the permissions that are available to the members of a group. It provides a centralized view of available roles, their scope, and the projects or organizations where they apply. Group members inherit permissions based on the roles that are assigned to the group in one or more projects.

You can also use groups to grant group members access to a project by adding the group directly to the project team. For more information, see [Add Groups to the Project Team](manage-project-access.html#add-groups-project-team).

## View Access Permissions of a Group

The access permissions for a group are displayed on the Roles tab in the group sidebar. Here, you can view which roles are assigned to the group.

* The list displays each role assigned to the group and the projects in which the group is granted this level of access.

* Click the ![](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/help.svg) icon next the name to display the set of permissions that are assigned to a role.

![The list of roles assigned to a group.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/group-roles.png)

> **Note: Viewing Access Permissions for Multiple Groups**
> If you want to see which groups have been granted a specific role, you can locate this information by filtering the list of groups. To learn how to filter the list of groups, see [Search for Groups](search-groups.html).

Procedure: To view the access rights for a group:

> **Tip:**
> Requires one of the following permissions:
>
>
>
> * Low-level Admin Read (for permissions with global scopes)
>
> * Read Organization + Read Project Full or Update Organization (for permissions with organization scopes)
>
> * Read Project Full (for permissions with project scopes)

1. From the main navigation menu, select ![](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/settings.svg) `Administration > Access Management > Groups`.

2. Select a group to open the sidebar.

3. Open the Roles tab.

4. Use the search box to filter the list by a role, project, or even a particular permission to find out if the group has the required access to a resource or operation.

![The list of roles for a specific group, filtered by a permission.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/group-roles-filtered.png)

## Grant a Role to a Group

You can grant a role to a group directly. Members of the group are granted all access permissions that are assigned to this role.

> **Note: Roles with Mixed Permission Scopes**
> YouTrack separates role definition from role assignment. While you can create roles with mixed scopes, the system only activates permissions compatible with the specific level where the role is assigned.
>
>
>
> * If you assign a role with mixed permission scopes at the global level, all permissions are considered as valid.
>
> * If assigned at the organization level, globally scoped permissions are disregarded and have no effect.
>
> * At the project level, permissions with global and organizational scopes are disregarded. YouTrack blocks the assignment of roles unless they contain at least one project-scoped permission.

Procedure: To assign an individual role to a group:

> **Tip:**
> Requires one of the following permissions:
>
>
>
> * Low-level Admin Write (for roles with global scopes)
>
> * Update Organization (for roles with organization scopes)
>
> * Update Project (for roles with project scopes)

1. From the main navigation menu, select ![](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/settings.svg) `Administration > Access Management > Groups`.

2. In the list of groups, select a group that you want to assign a role to.

3. In the sidebar, open the Roles tab.

4. Click the Assign role button.

![YouTrack interface with the control to grant role to group highlighted.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/grant-role-to-group.png)

5. In the Assign Role dialog, choose a role to assign to the group.

6. Select one or more projects or organizations where you want to assign the role. If you want to assign the role to all projects in YouTrack, select Global.

7. Click the Assign role button.

* The selected role is assigned to the group, and all its permissions are granted to the users who are members of the group.

## Revoke a Role from a Group

If a group of users no longer requires access granted by a role, you can revoke the role assignment.

Procedure: To revoke a role from a group:

> **Tip:**
> Requires one of the following permissions:
>
>
>
> * Low-level Admin Write (for roles with global scopes)
>
> * Update Organization (for roles with organization scopes)
>
> * Update Project (for roles with project scopes)

1. From the main navigation menu, select ![](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/settings.svg) `Administration > Access Management > Groups`.

2. Use the search box to find the desired group.

3. Select a group from the list.

4. In the sidebar, open the Roles tab.

5. Locate the role assignment that you want to remove from the selected group. Use the search box to locate a role by name, project, or permission.

6. Select the role assignment you want to revoke.

![YouTrack interface with the control to revoke role group highlighted.](https://resources.jetbrains.com.cn/help/img/youtrack/2026.2/revoke-role-group.png)

7. Click the Revoke role button.

8. Confirm the action in the confirmation dialog.

* The role is revoked from the group in the selected project.

* Members of the group lose the permissions that are assigned to the role in the project.