Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Team & access

Team & access

What are groups used for?

Quick answer

A group is a named set of scan profiles, chosen by hand, by tag, or both. Groups exist for access scoping: an admin can limit what a person or API token can reach to the profiles in a group. They do not change how a scan runs.

The short version

Think of a group as a named set of scan profiles. You fill it by ticking profiles, by picking tags, or both. Its job is access scoping. It limits what a person, or an API token, can reach, so a contractor on one product never needs to see the profiles of another.

How it works in Cyberlop

The Groups page holds your groups. Click + New group and the dialog asks for four things.

FieldWhat to enter
NameA label such as Payments services
DescriptionOptional note on what the group is for
Add by tagEvery profile with a chosen tag joins the group
Select profilesTick profiles one by one; a counter shows how many you chose

The Security page describes role-based permissions, with grants scoped to groups. That is why groups matter, and why a tidy set of groups makes later access reviews far quicker. A scan started from a pipeline runs with the token owner's permissions and group scope, so the same limit follows the token.

Groups never change how a scan runs. Severity, schedules and reports stay as they were. It only draws a line around what a grant can touch.

What to do next

Plan the slices before you click anything, because a group is easiest to keep tidy when each profile belongs to a clear owner.

  1. Sort your profiles by team, product or client.
  2. Create one group per slice with Create group.
  3. Ask an admin to scope a person's access to that group in Administration. That screen was outside our capture, so follow the on-screen steps or use the contact page.

Not sure whether you need a tag or a group? Read groups versus tags, then see how to create a group.

Full tutorial

How to group scan profiles by tag and group in Cyberlop

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.