Skip to main content
The Groups section in Team Settings allows administrators to seamlessly manage user access and permissions at scale. Groups are central to how your team interacts with Omnifact, enabling you to grant specific chat capabilities, model tiers, and access to different subsets of your organization. If your organization uses an Identity Provider (IdP), Groups also serve as the foundation for SCIM synchronization, automatically aligning your internal directory with Omnifact.

​
Understanding Groups

Groups act as an organizational layer to simplify user and permission management. They are designed around an additive permission model.
  • Additive permissions: A user receives the union of all capabilities granted by every group they belong to. Groups can only add permissions; they never restrict or deny access granted elsewhere.
  • Bulk Space sharing: Instead of inviting users to a Space one by one, you can share a Space with an entire group.

​
Types of Groups

There are three kinds of groups within Omnifact:
  1. Everyone (Built-in) This group is automatically created for every organization and cannot be deleted. It implicitly includes every active user. The permissions assigned to the Everyone group define your organization’s baseline access.
  2. Synced Groups These groups are automatically provisioned and updated via your Identity Provider (SCIM). While you cannot manually add or remove members from Synced groups in Omnifact, you can manage their Omnifact permissions.
  3. Manual Groups These are custom groups you create directly within Omnifact. You have full control over their names, membership, and permissions.

​
SCIM Synchronization & Identity Providers

SCIM Provisioning is an exclusive feature available for customers on the Enterprise Plan.
For mid-to-large organizations, SCIM synced groups are often the primary reason for using the Groups feature. When you connect your Identity Provider (like Azure AD, Okta, or Google Workspace) to Omnifact:
  • Groups from your directory are automatically mirrored into Omnifact as Synced Groups.
  • User membership is automatically updated as people join, move, or leave your company.
  • You map specific Omnifact permissions to these Synced Groups. For example, your “Data Science” IdP group can be granted access to Premium models without requiring any manual setup in Omnifact.
When SCIM is active, manual member management for these groups is locked to maintain your Identity Provider as the single source of truth.

​
Managing Manual Groups

1

Create a Group

  1. Navigate to Team Settings > Groups.
  2. Click the Add New Group button.
  3. Enter a Name (required) and a Description (optional).
  4. Click Create.
Create Group modal showing name and description fields
2

Add Members

  1. Click on your newly created group to open its details.
  2. Under the Members tab, click Add Members.
  3. Search for existing organization users and click Add.
Add members popover to search and select users
3

Edit or Delete

You can rename or delete manual groups at any time using the “More Options” menu in the group details view. Deleting a group will immediately revoke any permissions and Space access that members received exclusively through that group.

​
Group Permissions

Permissions are managed in the Permissions tab of any group’s detail page. Remember that grants are additive; if a capability is turned off here, a user might still have it through another group or the Everyone group.
Group Permissions tab showing Workspace Access, Model Access, and Privacy sections

​
Workspace Access

These permissions control which chat features are available to group members:

Upload files & attachments

Allows members to upload documents directly into their chats for analysis.

Upload images

Allows members to add images directly into a chat to support multimodal interactions, such as asking questions about a chart or diagram.
Privacy NoteImages uploaded via this feature do not pass through the Omnifact Privacy Filter™. While images are never used for training by the underlying model provider, any sensitive data contained within the images will be sent directly to the model.Please ensure your users are aware when handling sensitive data.

Audio Input (Experimental)

This experimental feature allows users to add audio files directly into a chat to support multimodal interactions with audio-capable models.
Privacy NoteAudio files uploaded via this feature do not pass through the Omnifact Privacy Filter™. While audio files are never used for training by the underlying model provider, any sensitive data contained within the audio will be sent directly to the model.Please ensure your users are aware when handling sensitive data.

Use web search and browsing

When enabled, this grants the AI the ability to search the internet and browse web pages. This capability is useful for providing up-to-the-minute information and gathering broader context for user queries that cannot be answered by the selected AI model alone.

Generate images

Enabling this feature allows users to transform their ideas into visuals by requesting AI-generated images.

​
Model Access

By default, all users have access to base tier AI models. You can grant access to more capable (and potentially more expensive) models:
  • Use standard models: Unlocks standard models.
  • Use premium models: Unlocks premium models (e.g., GPT-4, Claude 3.5 Sonnet).
Organization availability applies: A group permission only works if the specific model or feature is actually enabled for your organization in Models. If your organization has disabled premium models entirely, the group permission will have no effect.

​
Privacy & Compliance

These settings control data residency and privacy exemptions:
  • Enable US-hosted models access: Grants access to models hosted on US servers (Data Residency).
  • Privacy Filter Exemption: When assigned, this allows group members to temporarily disable the Privacy Filter for specific conversations where unmasked data is explicitly required.

​
Sharing Spaces with Groups

Instead of inviting users individually to a Space, you can share it with an entire group.
  1. Navigate to your Space and open Space Settings > Sharing.
  2. Click Share Space.
  3. Select any of your organization’s groups.
Group access to a Space is view-only (Member role). If you need someone to manage the Space’s instructions or Uploaded Files, you must add them individually as an Editor.