From e8a6fa74c17dfafbbb227090383a1dda5a9f2d02 Mon Sep 17 00:00:00 2001 From: Lorena Ciutacu <lciutacu@gitlab.com> Date: Thu, 8 Feb 2024 13:14:13 +0000 Subject: [PATCH] Document best practices for project-group sharing --- doc/user/project/members/sharing_projects_groups.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/doc/user/project/members/sharing_projects_groups.md b/doc/user/project/members/sharing_projects_groups.md index 5626ee469d87e..ea509dc801f94 100644 --- a/doc/user/project/members/sharing_projects_groups.md +++ b/doc/user/project/members/sharing_projects_groups.md @@ -101,3 +101,16 @@ After you invite a group to your group: `User A` has the Developer role in `Group 2`. `User B` is an inherited member of `Group 1`. This user doesn't get access to `Group 2` when `Group 1` is invited. + +## Setting up a group for collaboration + +If you intend to collaborate with external users on projects in your group, consider the following best practices: + +- Structure your groups and subgroups logically based on organizational needs. Avoid creating unnecessary groups. +- If you have a lot of users to manage, consider organizing users in groups separate from the groups organizing projects. Share these user groups into the groups and projects they need access to. +- Carefully consider which groups you invite to your projects. Invite only groups that need access, to prevent oversharing and maintain security. +- When you invite a group: + - Set the maximum role appropriately. It's better to assign the minimum permissions needed, instead of defaulting to the highest role. + - Inherited members from subgroups of the invited group also gain access to the project. You might prefer to invite subgroups separately instead. +- Check the maximum role of users who belong to multiple groups with access to a project. To prevent unintended high permissions, you might want to change the users' roles. +- Periodically review group access to shared projects and update as appropriate. If a group no longer needs access to a project, remove it. -- GitLab