Groups and members

Every member of a group or project has one of the predefined roles: Guest, Reporter, Developer, Maintainer or Owner. The role determines what the member can see and change, both in the group itself and in every project inside it.

A group also carries settings that apply to all of its projects: protected branch and tag rules restrict who can push directly or delete them, and push rules and other group-wide policies set defaults that a project inherits unless the group allows a project to override them.

1. Create a group:

   • Go to “Groups” → “New Group”.
   • Specify the group name (e.g., “Development Team”).
   • Set the visibility level:
     • “Private” — visible only to group members.
     • “Public” — visible to everyone without exception.
     • “Internal” — visible to all registered users.

   Creating a group requires the permission to create groups, which every registered user has by default. The administrator can restrict this permission. See Users and access.

2. Invite users:

   • Open the created group.
   • Go to the “Manage Access” section.
   • Click “Invite members”, enter the user’s email or username, and assign a role (e.g., “Developer”).

   When using SSO integrations, the access setup process may differ.

3. Assign roles to group members:

   • Go to the desired group.
   • Select “Manage” → “Members”.
   • Assign the appropriate role to each invited user.

Depending on the assigned role, users have different levels of access:

Guest:

• Group: Can view public items. No access to confidential data.
• Project: Can view issues in public repositories, but cannot comment or manage them.

Reporter:

• Group: Can view all information, including issues and public projects.
• Project: Can read code, CI/CD pipelines, and reports without making changes.

Developer:

• Group: Can create projects and modify repositories.
• Project: Has access to branches, commits, merge requests, CI/CD, and development tasks.

Maintainer:

• Group: Full control over projects and group members.
• Project: Can manage project settings, branches, tags, and merge requests.

Owner:

• Group: Full control, including deletion and role management.
• Project: Has group-level access with full project management rights.