---
schema_version: "1"
id: b07c21f3c3fbded8904d0fa7a6e6d9927865ac635e70684dfd05a65b29f7f665
title: Work with Group Sets
collection: tableau
version: current
locale: en-us
portal_url: https://docs.salesforce.com/tableau/current/en-us/server/group_sets.md
canonical_url: https://help.tableau.com/current/server/en-us/group_sets.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 2b34b9ffa1e98a46b43a81f475318aaa167651896f55ad58f59b767505c781a9
description: Create and use group sets to apply granular, group-dependent content permissions.
---
[Skip to main content](#main-content)

# Work with Group Sets

Beginning in Tableau Server 2024.2, you can create a container for your groups using group sets. A group set can contain one or more groups and be used to apply more granular rules for content permissions that are dependent on the group set. When enabling capabilities based on a group set, users in the groups that belong to the group set must be members of all the groups for the capability to be evaluated. In this way, group sets enforce AND logic.

**Benefits of group sets:**

- You can mix and match synchronized groups with local groups in permission rules to enable more dynamic access control scenarios.
- Use AND logic for groups in permission rules, which can simplify access control in some scenarios

**Notes:**

- Group set permission rules are evaluated after user and group rules. For more information about those rules, see [Evaluate permission rules](https://help.tableau.com/current/server/en-us/permission_effective.htm#EvaluatePermRules).
- Group sets can only be created by server administrators.
- Group sets are not to be used as a group of groups.

## Turn on group sets

Before group sets can be used for permissions, group sets settings must be enabled.

1. Sign in to Tableau Server as server administrator.
2. Navigate to the Settings page.
3. Under the Group Sets section, select the Allow group sets check box.
    
    ![](/tableau/current/en-us/server/en-us/Img/abac_groupset_setting.png)

After enabling group sets, a dedicated Group Sets page displays in the navigation pane.

## Create group sets

To create a group set, navigate to the Group Sets page and create a group set as you would a group.

1. Sign in to Tableau Server as server administrator.
2. Navigate to the Group Sets page and click the New Group Sets button.
3. Enter a name for the group set and click Create.
    
    ![](/tableau/current/en-us/server/en-us/Img/abac_groupset_create.png)
4. In the Group Sets table, click the name of the group set you just created and click the Add Groups button.
5. From the list of available groups, select the groups you want to add to the group set and click the Add button.
    
    ![](/tableau/current/en-us/server/en-us/Img/abac_groupset_add_groups.png)

## Set permissions on group sets

To use group sets, as a site admin, project leader, or content owner, add or edit the permissions of the content to use the group set.

For example, suppose you are the owner of the "Batters" workbook. To apply permissions based on the group set, do the following:

1. Go to the workbook and select Permissions from the actions menu.
2. In the Permissions dialog box, click the Add Group/User Rule button, and do the following:
    1. In the text box, enter the group set name, for example "All Contractors."
    2. Select the desired capabilities in the template.
    3. Click Save.
        
        ![](/tableau/current/en-us/server/en-us/Img/abac_groupset_permissions.png)

When permissions are applied using the group set model, you create permissions that affects the users that have membership in _all_ groups in the group set.

For example, you might restrict access to different workbook views based on a user’s regional group affiliation. Suppose you have users who are, contractors, contractor managers, full time employees, and full time managers accessing these workbook views.

Groups that have default permissions to view the workbook: All, North, South, East, West, Full Time, and Managers.

- For the North Region Detailed view:
    
    - Permissions are based on group set: North Region
    - Groups in the group set: Full Time, North
    
    Outcome: Only full time employees and full time managers in the north can see the data in the North Region Detailed view.
- For the All Region Detailed view:
    
    - Group set is called Managers
    - Groups in the group set: All, Managers
    
    Outcome: Only contractor managers and full time managers can see the data in the All Region Detailed view.

For more information about permissions, see [Configure Projects, Groups, Group Sets, and Permissions for Managed Self-Service](https://help.tableau.com/current/server/en-us/projects_data_gov.htm).