> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.method.security/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.method.security/_mcp/server.

# Managing permissions

> How permissions are managed in the Method Platform.

This page includes instructions for platform administrators to manage group membership and permissions within the
Method Platform. Please see the [Security Administration](/platform/security-governance/security-administration-guide)
page for a conceptual overview of the platform's authorization model.

---

## Group membership administration

Use the **Groups** page in the Administration app to create and delete groups, and the
**Members** tab of the same page to add or remove users from those groups.

![Group administration page showing a list of groups and the users in each group](/_fern-img/29a67c5b52993e1fd43d3f846d2b09edda2b484cc56b6827ef29629c4f35eb99.webp)

If you use SCIM to synchronize group membership to Method instance from your identity provider, then group membership cannot be altered within the platform,
and is controlled by your identity provider.

## Permission management

Use the **Permissions** tab of the **Groups** page to specify the permissions that each group has in relation to different platform resources.

![Permission change tab on groups page](/_fern-img/5b309ef7e210aac2940465025bede5f38c5bc575bbe265537321600b6d3d5791.webp)

## Environment permissions

Use the **Environments** page in the Administration app to view and modify the permissions that each group has in relation
to each existing [Environment](/platform/core-platform/administration#environments).

![Environment permissions tab showing the access level of each group for an environment](/_fern-img/f7cfa54862afe3ae980b269af0948e99119633300875f1c9d5571fcd39936617.webp)

## Default permissions for new environments

For new environments, the **Permission Defaults** page in the Administration app can be used to specify default permissions.
These defaults are a convenience feature so that permissions do not need to be manually applied to each new environment. They can
be overridden on a per-environment basis as needed.

In this example, we let the platform default of **All Users** view our new environment, but override the editors
group such that only the **Environment Owners** group can edit it. We also specify that members of the **Operation Runners**
group can run Operations in the environment, assuming that they have at least editor access to the environment.

![Default permissions controls for new environments](/_fern-img/87d1b9a6ff61cf32e05068015c832022ceebfabb8b81dd2d39ca27a275a0a3bb.webp)