Using Groups in Saturn Cloud

Create groups of users for team collaboration

Groups are currently only available for Saturn Cloud Enterprise.

If you want to collaborate on a project with other team members, groups are a great feature to use. A group in Saturn Cloud is a set of users that have shared ownership of:

  • Resources
  • Images
  • Credentials

Adding your fellow teammates to a group will enable you to share these with them. This is useful for both allowing users in the group to have access to objects like images for using on their own personal resources, and to have multiple collaborators be able to edit objects like resources. For example, let’s say, client has deployed a machine learning model as a service. Now if this deployment is owned by a single Saturn Cloud user it can be risky for the organization. If the employee goes on a vacation or quits their job, no one would be able to edit that running deployment. Instead with groups, any person in the group could edit the running deployment. For all these scenarios and more, multiple ownership ensures business is not dependent on a single person.

Note: when a user is in a group they still have the ability to own/edit their own resources, images, and credentials. Group-owned objects will show up in the UI alongside user-owned ones.

Create a group

Login to Saturn Cloud as an admin. On the sidebar click, Users & Groups then scroll down to Groups.

As an admin you can see all the groups that have been created so far.

Users and group

Click New to create a new group. This opens a new page where you enter name of your group. Click create. New group

Once a group is created, you can add users for the group and group git ssh keys as shown below. The git ssh keys are used by the group-owned resources to connect to git repositories. Now all group members are set to work in collaboration. add group

Group owned entities

Once you have created a group inside Saturn Cloud, the group is able to own:

Resources

Resources like deployments, jobs, Jupyter servers can be owned by a group to have have multiple collaborators. This reduces dependability of a resource on a single owner. To create a group resource, open a new resource and select a group from ‘Owner’ field dropdown as shown below. This cannot be changed once the resource is created. resource_group

Images

[Images]({{ref “images.md”}}) are the base software setups that resources run on. An image owned by a group can be used to power resources owned by the group, or resources owned by any user who is in the group. To create an image for a group, click on Images → New Image → Owner. Now select the group you want this image to be owned by. image_group

Credentials

Just like user credentials, group credentials can also be created. Note that group-owned credentials are unique among these entities in that they only are visible from group-owned resources. For security reasons a user who is a member of a group is not allowed to use the group credentials on their personal resources. Select Credentials from sidebar and click ‘new credentials’. On this page, under field Owner select the group name you want to create credentials for. group_credentials

Group Permissions

These are the permissions that are granted to admins vs other users.

PermissionsAdminUser
ViewCan view all the groups of all the users.Can view groups they are a part of
CreateCan create groups for usersCannot create groups for users
AddCan add users to a groupCannot add users to a group
DeleteCan remove users from groupCannot remove users from group

These are the permissions comparing how groups own items compared to how users interacted with those items.

EntityGroupUser in group
ResourceCan ownCan view and edit
CredentialCan use on group-owned resourcesCannot use on user-owned resources
ImagesCan use on group-owned resourcesCan use on user-owned resources

Need help, or have more questions? Contact us at:

We'll be happy to help you and answer your questions!