Groups and Permissions

Overview

Groups let you control which archived messages a user can see beyond their own sent and received mail. Instead of granting access per user, you create a group, assign email addresses or domains to it, and then add users as members. Group management is under Admin > Groups.

Creating a group

Go to Admin > Groups and click Add Group. Give it a name that makes the purpose clear — "Legal Team", "Finance", "Support Desk", etc.

Groups are flat. There is no nesting or hierarchy. If someone needs access to messages covered by multiple groups, just add them to all of them.

How access works

By default, users can search and view any message where their own email address (or one of their aliases) appears in the From, To, CC, or BCC fields. Groups extend this by granting access based on:

• Email addresses — add specific addresses to the group (e.g. [email protected], [email protected]). Members can then see all messages involving those addresses.
• Domains — add entire domains (e.g. example.com). Members can see all messages sent to or from any address on that domain.

For example, a "Support" group with the address [email protected] lets every member search and read messages to and from that shared mailbox, even though they were not personally a sender or recipient.

Adding members

You can add users to a group in two ways:

• From the group's edit page, select users from the members dropdown
• From a user's profile under Admin > Users, assign them to groups via the group checkboxes

You can also use the bulk action on the users list to add multiple selected users to a group at once.

Changes take effect immediately — the user's next search reflects their updated access.

Managing groups

From the group list you can click any group to edit its name, members, email addresses, or domains. You can also delete a group, which revokes the access it granted. Members fall back to only seeing their own messages. Archived messages themselves are never affected by group changes.