Using Security Groups to Manage User Permissions

Security Groups give SendSafely administrators granular control over user permissions and feature access. With Security Groups, you can enforce role-based access control and tailor feature availability to specific users or teams to minimize the risk of unauthorized activity.

Availability: Security Groups are available for Business and Enterprise plans.

What Are Security Groups?

Security Groups are customizable access control lists that determine which registered users can access specific SendSafely features. Instead of granting permissions individually, admins can organize users into groups and assign permissions at the group level.

Security Groups are ideal for organizations with:

• Multiple teams needing different levels of access
• Strict control over who can own Dropzones or Workspaces
• Requirements to restrict access to API keys or trusted device features
   

How Security Groups Work

Custom Configuration

• Each group is configured by the SendSafely support team, and  is tailored to your organization’s needs. The name of the group, and the assigned permissions can all be customized.
• Groups can be configured with one or multiple permissions.
• Common use cases include access control for Dropzones, Workspaces, API keys, and Trusted Device Keys.
• To get started, contact [e-mail] to request initial setup.

Admin-Controlled Membership

• Once enabled, any SendSafely admin can add or remove users from groups via the Enterprise Console.
• Add users one by one or in bulk (up to 50 at a time using a comma-separated list).
• Users can be assigned to multiple groups, allowing flexible, layered access models.

Available Security Group Permissions

Permission	Description
Workspace Ownership	Restrict Workspace creation and ownership to designated accounts only, while still allowing other users to collaborate in Workspaces.
Dropzone Ownership	Restrict Dropzone ownership to a small set of approved accounts for strict external file intake control.
Dropzone Manager	Assign Dropzone configuration and management rights to a specific team. Available permissions include the ability to: Manage the Dropzone profile (recipients and configurations) of Dropzones they belong to. Manage the status of items submitted to Dropzones they belong to. Bypass the Restrict Download and print setting of Dropzones they belong to.
API Keys	Prevent unauthorized users from generating API keys—ideal for isolating technical access.
Trusted Device Keys	Restrict who can add trusted devices, which is useful for limiting user access to encrypted packages via secure link only.

As SendSafely introduces new feature-level permissions, they will be added to the Security Groups system.

Enabling Security Groups

If you're a SendSafely Enterprise or Business customer and would like to enable Security Groups:

1. Contact our team at [e-mail] to configure your group structure. Need help planning your group strategy? Our support team can assist with best practices and compliance alignment.
2. Once set up, you can manage group memberships through the Enterprise Console or via the SendSafely API.