1.0 Introduction
This article describes how to create a group, manage user permissions within a group, update group details, and remove a group when it is no longer needed in Fortanix Confidential Computing Manager (CCM).
A group is a collection of users and objects that helps users manage identities, create collaborating groups, and organize and secure applications, datasets, and workflows that belong to the group.
For more information, refer to Groups and Collaboration Groups - Concepts.
2.0 Create a Group
Perform the following steps to create a group:
In the CCM left navigation panel, click Groups, and then click + ADD GROUP.
Figure 1: Create Group
On the GROUP form, do the following:
Name: Enter a name for the group. For example, Demo Group.
Description (optional): Enter a short description for the group.
Labels (optional): Add one or more key–value labels to the group.
Click SAVE to create the group.
Figure 2: Create new group
The group is created successfully.
NOTE
For existing Fortanix CCM accounts, after the CCM 3.35 release, a default group is automatically created for all resources such as applications, datasets, workflows, and images.
For a new Fortanix CCM account, you must create a group manually.
From the detailed view of a group, you can view all associated users, tasks, applications, images, datasets, application configurations, inbound and outbound connectors, scripts and workflows.
In the detailed view of a group, the Users section lists the members of the group.
Users with the Administrator role are automatically added to all groups as Group Administrators and cannot be removed.
Users with the Viewer role are automatically added to all groups as Group Auditors and cannot be removed.
Users with the Editor role must be manually added to groups as a Group Administrator or Group Auditor. They can be removed from the group only if they are assigned the Group Auditor role. For more information, refer to Section 3.0: Assign Group Permission for a User.
In the CCM 3.35 version, existing users with the Editor role cannot view objects created by themselves or by an Administrator after migration. To restore access, an Administrator must add the Editor user to the CCM_DEFAULT group as a Group Administrator.
You can create applications, application configurations, users, datasets, and workflows directly from the group details page.
For information about the collaborating groups, refer to the Groups and Collaboration Groups - Concepts.
Figure 3: Group detailed view
3.0 Assign Group Permission for a User
Users with Editor roles in a CCM account must manually be added to a group as Group administrator or Group auditor.
Perform the following steps:
From the CCM left navigation panel, click Users, and then click + ADD USERS.
Figure 4: Add user to group
On the USERS form, do the following:
From the list of available users, select the user you want to add to the group.
Assign the appropriate group permission (Group Administrator or Group Auditor) to the selected user.
Click SAVE to apply the changes.
Figure 5: Select user
4.0 Edit a Group
Perform the following steps to edit a group:
In the group’s table view, click the overflow menu
for the group and select EDIT GROUP to edit the group. 
Figure 6: Edit Group
On the GROUP form, update the required fields, such as name, description and labels.
Click SAVE to apply the changes.
Figure 7: Edit group details
5.0 Remove a Group
Perform the following steps to delete a group:
In the group table view, click the overflow menu
for the group you want to remove and click REMOVE GROUP to delete the group. 
Figure 8: Remove Group
Click DELETE to confirm the action.
Figure 9: Confirm action