# Creating Roles and Groups using Policy Configurator UI

#### 1. Roles

Set of textual constants that are used to separate users into different roles.

**1.1 Creation of Roles**

Roles can be created by adding Role Property and its Value in Policy Configurator as shown below:

<figure><img src="/files/mxIHo4oocaOPOXBqOWR8" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/cEeKuI2wqMQ571tr7Raj" alt=""><figcaption></figcaption></figure>

**1.2 Usage**

This is used for setting Permissions for a block, which limits which users can see this block or access it via the API.

<figure><img src="/files/IJMK85YknpWkeCrOS2Ro" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/ldTudIfYkY7Vs5zeR09v" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
**Note:** Permissions do not affect the Block via Events.
{% endhint %}

#### 2. Groups

Groups are separate sets of documents access , which can be limited to users who are members of the group.

{% hint style="info" %}
**Note**: A user can be included into any number of groups with a single role within each. User roles can be different in different groups.
{% endhint %}

**2.1 Properties**

| Property Name     | Definition                                                                                                                                                                                                                                                                                            |
| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name              | The name of the group                                                                                                                                                                                                                                                                                 |
| Creator Role      | Role which is assigned to the creator of the group                                                                                                                                                                                                                                                    |
| Members Role      | The list of roles which can be assigned to members of the group                                                                                                                                                                                                                                       |
| Relationship Type | <p>· Single – only a single user can be included in the group. This type is maintained for backward compatibility with historic policy versions.</p><p>· Multiple – the group can include multiple users. This is the new mode of operation.</p>                                                      |
| Access Type       | <p>· Global – static group is created at the start. The creator of the group is the creator of the policy.</p><p>· Private – a new instance of the group is created every time a user selects group creation action. The creator of the group is the user who executed the group creation action.</p> |

<figure><img src="/files/Pyf52gvQuDz1rR2puRBl" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/mAtheOQs5PU66WkDBe69" alt=""><figcaption></figcaption></figure>

**2.2 Usage**

**documentsSourceAddon** has multiple filters which allow us to select relevant documents

| Owned by User | Owned by Group | Document Selection                                              |
| ------------- | -------------- | --------------------------------------------------------------- |
| False         | False          | Documents are not filtered by Owner.                            |
| True          | False          | Only documents created by the current user (in all groups)      |
| False         | True           | Only documents created in the current group (by all users)      |
| True          | True           | Only documents created by the current user in the current group |

<figure><img src="/files/Ns8hF8K5VWbjt0pXbpHZ" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/BHI0mLoUdkTtpvuRogwm" alt=""><figcaption></figcaption></figure>

#### 3. Switching between Groups

When a policy contains multiple groups, users have an option to switch between those they are included in. The selection menu also allows to switch to the ‘no group’ default state, i.e. the state in which the user is not acting as a member of any group.

<figure><img src="/files/p77cs1KEvBy65QumU8Bq" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.guardianservice.app/technical-information/users/standard-registry-users-schemas-and-policies/policies/roles-and-groups/creating-roles-and-groups-using-policy-configurator-ui.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.