Groups

Permission groups let you assign lakehouse permissions to a set of users instead of one by one. Use the Groups area in workspace settings to create and manage groups and to add or remove members from each group.

​

The All group

Every workspace has a built-in group called All that includes every user. New users are added to All automatically. You cannot edit, delete, or change membership of the All group. Owners, admins, and members with Manager permission on a resource can use the All group to grant or revoke access to all members at once. New workspaces grant the All group Manager access to the default layers.

​

How group and individual permissions combine

If a user belongs to a group that has Viewer access to a table but their individual permission on that table is Editor, they get Editor access. Nekt always applies the highest permission the user has from any group or direct assignment. Permissions only add access; there is no deny. A group with Viewer access does not restrict members who also get Manager through the All group. To restrict a layer to specific teams, first lower or revoke the All group’s permission on it, then grant access to the team groups. Only owners and admins can create and manage groups and manage which members belong to each group.

​

API & MCP