# Groups and permissions

Two admin levers for keeping a larger organization tidy: **groups** (a way to organize
users and delegate invitations) and **permissions** (who's allowed to do what).

## Groups

A **group** is a named set of users in your organization, managed at [**Groups**](/360/groups).
A user can be flagged **group admin** for a group, which lets them invite people *into
that group* without being a full org [admin](/help/team-and-admin/inviting-users) — handy
for delegating onboarding to team leads. (Groups are about organizing people and
delegating invites; for round-robin host pools you want a [team](/help/team-and-admin/teams),
which is a separate thing.)

<Screenshot
  src="/help/screenshots/team-and-admin/groups.png"
  alt="The Groups page in the 42min dashboard, listing the organization's groups and their members"
  caption="Groups — create groups, add members, and mark group admins who can invite into their group."
/>

## Permissions

The [**Admin Center → Permissions**](/360/admin?tab=permissions) tab controls who in
the organization can:

- **Create shared events** ([templates](/help/team-and-admin/templates) and team-level event types),
- **Manage workflows**,
- **Invite users** — and there's an **allowed email domains** list, so invitations are
  limited to addresses on your domains.

Each is set to a scope like *everyone* or *admins (and group admins)*.

<Screenshot
  src="/help/screenshots/team-and-admin/permissions.png"
  alt="The Permissions tab of the Admin Center in the 42min dashboard"
  caption="Admin Center → Permissions — who can create shared events, manage workflows, and invite users, plus allowed email domains."
/>

## How to do it

1. **Groups:** [**Groups**](/360/groups) → create a group, add members, and mark any
   group admins.
2. **Permissions:** [**Admin Center → Permissions**](/360/admin?tab=permissions) → set
   each "who can…" scope and the allowed email domains; save.

## Common pitfalls

- **Group ≠ team.** Adding people to a group does *not* put them in a
  [round-robin team](/help/team-and-admin/teams) — those are managed separately on the
  Teams page.
- **Invitations blocked by domain.** If "allowed email domains" is set and you invite
  an outside address, it's rejected — add the domain or invite a matching address.
- **"I can't change a setting."** Permissions and most Admin Center settings are
  admin-only; a group admin can manage their group but not org-wide permissions.