tiCrypt 2.18.3

Groups

AdministratorRequires: Admin or Super-admin role

Permission requirements

• Groups
  • View groups they are a member of
  • Get the keys of groups they are a member of (needed to open and share group files)
  • Rename groups they own and give ownership to another member
  • Add users to groups they are a member of, if the group allows it
  • Change other members' group permissions in groups they are a member of
  • Remove users from groups they are a member of, if the group allows it
  • Delete groups they own
• Projects
  • View projects they are a member of
  • Tag what they own with a project they are active in

note

The Groups table appears only for users with the Admin or Super-admin role. Sub-admins do not see it, whatever their permissions.

The Groups table in Management lists every Vault group in the system, including groups you are not a member of. A group is a set of users who share a folder in the Vault; users create and run their own groups from the Vault, as described in Groups. This table is where an administrator finds a group nobody else can fix: one whose owner has left, whose members need removing, or that has to be deleted.

Why administrators manage groups from Management

Users only see the groups they belong to. The Vault's Groups section lists a user's own groups, so no member can see or repair a group they have been removed from or never joined. The Management table shows all of them, with their owners and projects, so an administrator can act on any group.

An Admin role overrides the owner for some actions, not all. Admins can rename a group, remove its members, change their restrictions, give it a new owner and delete it, whether or not they are members. They cannot add members or change the project of a group they are not in, because adding a member needs the admin's own copy of the group's key, and changing the project needs a right inside the group. To do those, become a member first, or ask the owner.

View the groups

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Users section.
3. Click Groups in the left panel.

Result:

The table lists each group's Group name, Owner, Project, Created date, Managers and Members. Groups you belong to are highlighted green.

Managers counts the members who can add members, that is, members not restricted with Cannot manage group. Members counts everyone in the group, managers included. A group saved without a name shows the first names of its members as its name.

The group actions appear only when exactly one group is selected; selecting several groups shows no actions. There is no group panel or overlay: everything is done from the actions below.

Group actions

Select one group, then use the pinned action or Open full menu. The following table describes the actions and when an Admin or Super-admin sees each one.

Action	What it does	Offered to an Admin when
Edit	Opens the group's Edit window: its members, their Group restrictions and its name.	At least one of the changes below is allowed.
Rename	Renames the group.	You have Rename groups they own and give ownership to another member.
Change project	Classifies, declassifies or force-changes the group's project.	You can change project tags, and you own the group or are a member not restricted with Cannot manage group.
Change owner	Makes another member the owner.	You have Rename groups they own and give ownership to another member, and the group has another member who is not deleted.
Leave group	Removes you from the group.	You are a member but not the owner, and you have Remove users from groups they are a member of, if the group allows it.
Delete	Deletes the group and its folder.	You have Delete groups they own.

Edit a group's members

1. In the Groups table, select the group.
2. Click Edit.
3. In the Edit window, remove members with Remove from group, or change a member's Group restrictions (Cannot manage files, Cannot manage group).
4. Click Save.

Result:

The changes run in the background as tasks in the task tray, one per kind of change, for example "Change the permissions of n members of group-name".

The window shows each member's name and email, and a crown on the owner's row. The owner's restrictions and row cannot be changed. Add members appears only when you are the owner or a member who may add members, because adding someone needs your own copy of the group's key. When the group has a project, members without an active membership in it are flagged; they stay in the group but cannot open its files until they join the project. For what each restriction removes, see Group restrictions.

Admins can also add a user to one of the admin's own groups from Management > Users: select the user and choose Add to group. See Add Members to a Group.

note

You may be asked to enter your password when adding a member for the first time.

Rename a group from Management

1. In the Groups table, select the group.
2. Click Open full menu and select Rename.
3. In the Rename group pop-up, enter the new name in New Name.
4. Click Rename.

Result:

tiCrypt shows "Group renamed to new-name". The group's folder takes the new name for every member.

Change the project of a group from Management

1. In the Groups table, select the group.
2. Click Open full menu and select Change project.
3. In the Change project tag for group pop-up, select the project.
4. Click Classify, or Declassify for a parent project or No project (unlocked).

To move the group to any project regardless of how the projects relate, tick Use my permission to override rules, re-tag resources with any visible project, regardless of current project relations before you select the project, and click Force change with admin privilege.

caution

The person performing this action must be an active member of the target project, and Change project appears only to the owner or to members not restricted with Cannot manage group. Multiple groups can share the same project tag. Group members who are not active members of the project cannot open the tagged group's files.

Change the owner of a group from Management

1. In the Groups table, select the group.
2. Click Open full menu and select Change owner.
3. In the Change the owner of group pop-up, pick the member in New owner.
4. Click Change owner, then Yes in the Transfer ownership of group to member? confirmation.

Result:

tiCrypt shows "Transferred ownership to user-name".

The confirmation names the current owner: they lose all their permissions within the group and can no longer delete it, but they can leave it. The new owner gets full permissions and can no longer leave the group unless they transfer ownership again.

Leave a group from Management

1. In the Groups table, select the group.
2. Click Open full menu and select Leave group.
3. In the Leave group? dialog, click Yes.

The dialog warns: "Someone who has permission within the group will need to re-invite you for you to access resources shared with the group (but not you) again."

Delete a group from Management

1. In the Groups table, select the group.
2. Click Open full menu and select Delete.
3. In the Delete group? dialog, click Yes to confirm.

Result:

tiCrypt shows "Deleted group-name", and the group disappears from the table and from every member's Vault.

Deleting a group is irreversible

The dialog warns: "Deleting a group is irreversible. Members will lose access to shared files unless they have otherwise been granted access. Additionally, the group file system will be destroyed."

Related

• Groups (user guide): how users create groups, add members and share files through a group's folder.
• Permissions: the account permissions in the Groups category that every group action needs.
• Projects: why a group's members need an active project membership to open its files.