Personnel Groups

Personnel Groups allows you to designate which users are required to complete certain onboarding tasks and specify requirements for those tasks. For each onboarding task you're able to specify:

  • Which trainings are required
  • Which policies are required
  • Secureframe Agent installation required or not
  • Background checks required or not

Default Groups

Secureframe creates several default groups. These group names cannot be edited, nor deleted. The default groups are: 

  • Employees 
  • Contractors
  • Auditors 
  • Information Security team 
  • Framework (SOC 2, HIPAA, ISO 27001 etc)
  • Note: Personnel cannot be removed from default groups

When a new framework has been added, an empty default framework group gets created.

Creating a new group

  1. Navigate to the Personnel dashboard and click the cog icon to open the Personnel Settings page.
  2. Click the Groups tab.
  3. Click the +Create new group button.
  4. Name the new group.
  5. Once the new group has been created, you may search for specific users to add or add an entire existing group.Screenshot_2023-04-19_at_9.51.02_AM.png

User Groups

Secureframe can automatically sync user groups from supported identity and directory integrations. These groups can then be used throughout the platform to streamline personnel management, onboarding, and compliance tasks.

Supported Integrations

Secureframe currently syncs user groups from the following integrations:

  • Entra ID

  • FusionAuth

  • Google Cloud Identity

  • Google Workspace

  • Office365

  • Okta

Where to View and Import Groups

Synced groups are displayed in the platform under:

Personnel > Settings > Groups

From this page, you can import any listed group by clicking the "Import" button next to it. Once imported, the group becomes available for use throughout the platform.

Common Use Cases

After importing, groups can be used in a variety of areas, including:

  • Assigning background checks during onboarding

  • Enrolling users in training programs

  • Inviting personnel to the platform

  • Assigning policies

  • Managing access and permissions

Using groups helps you efficiently manage large teams and ensure the right users receive the right assignments and requirements.

Frequently Asked Questions (FAQ)

Should a dedicated group be created for new hires and then removed after they complete their training?

  • No, it’s not necessary. When users are assigned as either “employee” or “contractor,” they are automatically added to the corresponding group. The platform uses this to assign onboarding tasks, including security training, policies, and background checks.

  • New hire training and policy acknowledgments are tracked automatically and also count toward the annual requirement. After completion, users will only receive annual tasks moving forward.

  • Creating a custom group is only needed if you want to customize which users receive specific onboarding tasks or policies.

How can I publish a new policy only to new hires and not all employees?

  • You can control who receives a policy by using Personnel Groups.
  • If you want a new policy to be acknowledged only by new hires (instead of being sent to everyone upon publishing), follow these steps:
    • Create a group for your new hires – for example, name it 'New Hires'.
    • Assign new employees to this group as they join your organization.
    • When publishing the policy, select only the New Hires group as the audience.
    • If needed, you can later add more groups (e.g., Employees or Contractors) to the policy to schedule annual acknowledgments or broader rollouts.

How can I edit the groups of policies? 

  • Groups can be edited by going to the Policies Page > select relevant policy > Edit policy > Group dropdown menu in the right side panel > Select applicable groups.
  • This can also be done from the Personnel Settings > Groups tab. You may read more about the Groups tab here.

 

 

Was this article helpful?

Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.