Groups

Purpose#

Groups bundle users for access control. In Floprints, groups primarily gate cloud provider access:

• Assign Bedrock provider access to a group
• Members of that group can compose, deploy, and run workflows on that provider
• Users can belong to multiple groups

Managing groups#

Admin → Groups:

1. Create a group with a name
2. Add members
3. Grant cloud provider access to the group

Admins bypass group checks and can use all configured providers.

Fail-closed access#

If a member’s groups do not include a provider grant, operations against that provider return 403 Forbidden. There is no implicit access.

Audit trail#

Group membership changes and provider grant changes write to the audit log synchronously.

Related#

• Cloud providers
• Users