Groups
In Alli, individual users are called members, and collections of these members grouped by roles and permissions are called groups. By using groups, you can set member permissions in bulk or efficiently organize management by work unit.
Understanding group and permission structure
In Alli, there are the following three basic groups, each with different permission levels:
▪️ Admin (Administrator) ※ Cannot be edited
Holds the highest-level permissions for the entire Alli platform.
Cannot be deleted or edited and can only be assigned manually through the Alli dashboard.
Only an Admin can remove another member's Admin permissions.
▪️ Super Agent ※ Editable
Has read/write permissions for most functions.
However, security settings, payment settings, member edit/delete, and activity log downloads are not possible.
Group names and permission settings can be freely changed.
▪️ Agent ※ Editable
Most functions are available in read-only mode, and the settings menu is not accessible.
Group names and permission settings can be freely changed.
Read and write permissions
Read : Can view screens and check content
Write : Can change settings, register, delete, and perform other operations
Creating and editing groups
You must have the relevant permission to create or edit groups and add members.
Create group
Click the [Create Group] button on the dashboard
Specify the group name and select permission configuration
Select and add members to include in the group
Edit group
Click the [...] button for the group on the dashboard → select [Edit]
Change group name and modify permissions (※ Admin cannot be changed)
Proper use of groups allows efficient management of access permissions by task and enables flexible project-level settings.
Assigning multiple groups to one member
▪ A single member can belong to multiple groups at the same time.
Example: Member A can simultaneously belong to G1 (Super Agent), G2 (Agent), and Admin (Administrator) groups.
There is no separate limit on the number of groups a member can belong to.
▪ Group permissions are merged and applied using OR logic.
Example: If Member A has G1 (read permission) and G2 (write permission), the final result grants both read + write permissions.
▪ Notes when removing groups
Non-Admin members cannot remove another member's Admin group.
Example: If Member B belongs to Admin, G1, and G2, G1 and G2 can be removed but Admin cannot be removed
If all groups a member belongs to are removed, they become 'Unassigned'.
Group management when integrating SAML
When using SAML-based SSO, group information is automatically updated with the values delivered from the external IdP system.
Even in this case, Admin permissions are managed separately in the Alli dashboard regardless of the external system, and Admin permissions must be set within the dashboard to obtain them.
Last updated