Add Group
Overview
The Add Group page is used to assign a Catalog IAM role to an existing group.
This page creates a new binding between a group and a role. Once the binding is created, all members of the group immediately inherit the permissions provided by the selected role and its associated policies.
A group may have multiple role assignments depending on the authorization requirements of the catalog.
Creating a Group Binding
To assign a role to a group:
- Select an existing Group.
- Select the Role to assign.
- Click Save to create the binding.
Click Cancel to close the panel without saving any changes.
Binding Information
The form contains the following fields:
| Field | Description |
|---|---|
| Group | Selects the existing group that will receive the role assignment. |
| Role | Selects the Catalog IAM role to assign to the selected group. |
Role Assignment
A group binding associates a single group with a single role.
Once the binding is created, every policy contained within the selected role becomes effective for all members of the group.
If additional permissions are required, administrators may create additional bindings for the same group.
Validation
The following validation rules apply when creating a group binding:
- Group is required.
- Role is required.
- The selected group and role must exist.
- Duplicate bindings between the same group and role are not allowed.
Access Requirements
This page is available only to users with Administrator privileges.
Only administrators can assign Catalog IAM roles to groups. Non-administrator users cannot access this page.
Users without administrator privileges will receive the following authorization error:
Access Denied
You don't have access to this resource.