Gen3 Groups Managing Membership - GT-Edge-AI/GT-AI-OS GitHub Wiki
Managing Membership and Sharing
Start Here
- Open Groups and select the group to administer.
- Review current members and pending invitations.
- Add or remove members according to tenant policy.
- Audit shared agents and datasets after membership changes.
Why this matters
Membership changes are a security and data-isolation event—stale members should not retain access to shared resources.
Details
The detailed group management shelf is where Gen 3 handles membership, invitations, observable requests, and resource sharing for a specific group. Use it after you select a group from the main Groups page.
The three active shelf areas
Overview
The overview tab shows the group's role posture, default resource permission, member counts, managed-group governance fields, and pending observable requests for managers.
Members
The members tab is where you:
- invite users by email
- bulk add users from a pasted list
- review current members and pending invitations
- adjust group permission levels
- request or review observable access
- update tenant role from the group member roster when your permissions allow it
Resources
The resources tab is where you share or unshare:
- agents
- datasets
The Shared resources table supports bulk member-access editing: select one or more shared agents or datasets, then Set all access on selected resources to read or edit to apply the same permission level to every accepted member at once. Use Manage access on a row when only some members need a different level. Add Resources opens a nested shelf to search and bulk-share inventories without pushing the table off screen.
Shared resources inherit the group's permission model, so membership and resource sharing should be reviewed together rather than as separate workflows.
Common tasks
Invite a user
- Open the group management shelf.
- Move to
Members. - Enter the user's email.
- Choose the group permission level.
- Send the invitation.
Bulk add members
Use the bulk-add path when you already have a prepared list of addresses. This is faster than repeating single invites and keeps the group rollout consistent.
Share an agent or dataset
- Open the group management shelf.
- Move to
Resources. - Choose the agent or dataset to share.
- Confirm the share.
- Verify that the members who need the resource can now see it.
Permission model
The current group workflow distinguishes between group permission levels such as read, share, and manager. Give users the minimum level that still matches their responsibility.
Observable requests
Managed groups can surface observable requests so a group manager can approve or deny deeper visibility. Review these from the overview area before assuming observability data is missing.
Best practices
- Keep membership aligned to the smallest real collaboration audience.
- Review resource sharing after large membership changes.
- Use managed groups when you need a real manager approval path.
- Avoid using groups as a substitute for tenant-wide visibility when the content is actually global.