User Groups

User groups provide a reusable, hierarchical way to grant access in Gitea Enterprise. Instead of adding the same users to every team or repository individually, administrators can define a group once, add members, and assign the group to organization teams.

User groups are available in Gitea Enterprise v26 and later.

Enable user groups

1. Open Site Administration > User Groups.
2. Check Enable user groups.
3. Save the setting.

When user groups are enabled, the user-group management pages, LDAP user-group synchronization settings, and team user-group sections are shown. Disabling the feature hides all user-group related UI and routes.

Create and manage groups

1. Open Site Administration > User Groups.
2. Click New User Group.
3. Enter a Name and, optionally, a Description.
4. Optionally choose a Parent group to build a hierarchy.
5. Leave Slug empty to derive it from the name, or enter a stable lowercase identifier using letters, numbers, dots, underscores, and hyphens.
6. Click Create Group.

From a group’s edit page you can:

• add or remove individual members
• create or view child groups
• review which organization teams use the group

Hierarchy and effective members

User groups can be nested. A child group includes its own direct members and the effective members inherited from its parent groups. When a user group is assigned to a team, all effective members of the group receive the team’s access.

Assign groups to organization teams

1. Open the organization’s Teams page and select a team.
2. Open the User Groups section.
3. Click Add User Group and select one or more groups.

Members inherited through child user groups are included in the team. Removing a member from the source user group removes the access granted through that team.

Synchronize LDAP groups to user groups

User groups can be synchronized from an LDAP authentication source:

1. Open Site Administration > Identity & Access > Authentication Sources and edit the LDAP source.
2. Set LDAP Group Synchronization Mode to Synchronize groups to user groups.
3. Configure the group unique ID, name, description, parent detection strategy, and sync interval.
4. Save the authentication source, then choose Sync LDAP User Groups Now to run an initial synchronization.

The synchronization creates and updates user groups and their members from the directory. The last synchronization status is shown on the authentication source page.

Availability

User groups were introduced in Gitea Enterprise v26.