Assign admin roles to specific groups

Scale and secure your role-based access controls (RBAC) practice on Workspace by leveraging a new capability for role assignments to groups. You can now assign admin roles to groups in addition to or instead of individual users. For example, you can assign the service admin role to an existing group that contains all of the IT admins in your organization. 

Currently, there is a limit of 500 role assignments— since groups can contain unlimited members, this gives you more flexibility to manage roles as needed. This is particularly helpful for larger organizations, allowing them to pare down their role assignments without exceeding the limits. 

Also, roles assigned to groups will automatically reflect changes in underlying membership of the group. This allows admins to manage role assignments at a higher-entity level vs adding/removing end-users one at a time to maintain updated privileges.