# Configure groups and permissions Create permission groups that control what each team role can see and do in Tooling Metrics. Source: https://support.toolingmetrics.com/en/admin/tutorials/configure-groups-and-permissions/ Updated: 2026-10-29 **Prerequisites:** Organization created. **Required permission:** Admin Center access (organization owner or a member of the `-admins` group). A **Group** defines what its members can do with each record type (Pick Lists, Tool Assemblies, Purchase Orders, and so on). A user can belong to more than one group — where they do, the highest permission level across all their groups applies, per record type. Create your groups now so they're ready when you invite users in the next tutorial. Your organization already has two built-in groups you can't edit: everyone lands in the `-users` group by default, and `-admins` grants Admin Center access. The groups you create here are additional, more targeted roles layered on top. ## Permission levels Each group has an independent permission level for each record type: | Level | What members can do | |---|---| | **Admin** | See all records, create, and edit or delete any record | | **Manager** | See all records, create, and edit or delete their own records | | **User** | See, create, edit, and delete only their own records | | **No permission** | Record type is hidden | The group form lists the record types under six module headings: Production, Inventory, Purchase, Engineering, Library, Reports. Administration is not one of them — Admin Center access comes from the built-in `-admins` group, not from a permission level you set here. ## Create a group 1. Open the **Admin Center**: click your organization name at the bottom of the sidebar → **Manage Organizations**, then open your organization. 1. In the admin sidebar, click **Groups** → **+ Create**. 1. Enter a **Name** for the group (e.g., *Engineers*, *Operators*, *Purchasing Team*). 1. Optionally add a **Description**. 1. Under **Permissions**, set the level for each record type. 1. Click **Create**. Repeat for each group your organization needs. ## Suggested starter groups These groups cover the typical roles in a precision machining shop. Each table gives one level per module heading: set every record type under that heading to it, then adjust individual record types to match your organization's requirements. Manager is the lowest level that shows everyone's records, so it is the level for the modules a role only needs to read. **Engineers** — CNC programmers and tooling engineers | Module | Level | |---|---| | Library | Manager | | Engineering | Manager | | Inventory | Manager | | Production | Manager | | Purchase | Manager | | Reports | Manager | **Inventory Team** — Inventory controllers and tool room | Module | Level | |---|---| | Library | Manager | | Engineering | Manager | | Inventory | Manager | | Production | Manager | | Purchase | Manager | | Reports | Manager | **Purchasing Team** — Buyers and purchasing managers | Module | Level | |---|---| | Library | Manager | | Engineering | Manager | | Inventory | Manager | | Production | No permission | | Purchase | Manager | | Reports | Manager | **Operators** — Machine operators with limited access | Module | Level | |---|---| | Library | No permission | | Engineering | Manager | | Inventory | Manager | | Production | User | | Purchase | No permission | | Reports | Manager | None of these starter groups need Admin Center access — that comes from the built-in `-admins` group, not from anything set here. ## Next [Invite users](https://support.toolingmetrics.com/en/admin/tutorials/invite-users/) — now that your groups exist, you can invite team members and add each one to the right group.