Skip to content

Users and Groups visibility

From Catalyst 1.10 onwards, visibility of users and User Groups is controlled through List permissions.

List permissions determine which users and User Groups appear throughout the platform when someone needs to select people or groups.

This helps ensure that users can only see and select the users and groups they are allowed to work with.

How visibility works

List permissions control who can see and select users and User Groups across Catalyst.

They affect areas such as:

  • task assignment
  • record ownership
  • Object Class ownership
  • Permission Sets
  • user-type fields
  • filters and dropdown lists

If a user does not have the relevant List permission, the user or User Group will not appear in selection fields.

User-type field exception

There is one exception.

If a user-type field has been configured with specific users or User Groups, those configured options are available to users who can create or edit records containing that field.

This applies even if the user would not normally have permission to list those users or User Groups.

In this situation, limited details such as name and email address may be visible for the selected users.

How List permissions are granted

Permissions for viewing and listing users and User Groups are closely connected.

When a user has permission to view a User Group, they can also list the members of that group.

This allows users to select the relevant users or User Groups in areas where visibility is required.

User Group Permission Sets

Each User Group has default Permission Sets that control who can view and interact with the group.

Owners

Owners have full permissions for the User Group:

  • View
  • Edit
  • Delete

These permissions cannot be modified for Owners.

Owners can view the User Group, list its members, and manage the group.

Members

The Members Permission Set applies to all members of the User Group who are not Owners.

By default, Members have View permission. This allows them to see the User Group and list other members in places such as task assignment, default task assignee selection, and Permission Set assignment.

Everyone

The Everyone Permission Set applies to users who are not Owners or Members of the User Group.

By default, no permissions are granted.

This means users outside the group cannot list the group's members unless additional permissions are assigned.

Custom Permission Sets

Custom Permission Sets can be created to provide more precise visibility.

For example:

  • a legal team may need visibility of a compliance User Group
  • a team leader may need visibility of a group they do not own
  • a department may need access to specific users without seeing all users in the system

User Group Permission Sets controlling visibility of users and groups

API-based visibility for Config Admins

Config Admin users can be granted the users.list permission through the API by using a dedicated Role.

This permission allows them to list and view all users across the system, even if those users are not part of User Groups they own.

This is useful where trusted administrators need broader user visibility while other users remain restricted to their assigned groups.

API configuration granting Config Admin users global users.list permission

Super Admin visibility

Users with a Super Admin account type have full List permissions across the platform.

They can view and list all users and User Groups, including full user account details.

Visibility for 1-time completion users

Users with a 1-time completion account type cannot be assigned to User Groups.

However, they still need to be visible for some actions, such as:

  • task assignment
  • filtering
  • user-type fields

Visibility of 1-time completion users is automatically available to:

  • Super Admin users
  • Config Admin users with the appropriate users.list permission granted through the API

This allows task-specific users to be assigned where required without exposing other user information more widely.

Where List permissions matter

List permissions affect any part of Catalyst where users or User Groups can be selected.

Examples include:

  • Task ownership and assignment
  • Object Class ownership
  • record ownership
  • Object Class Permission Sets
  • Record Permission Sets
  • user-type fields
  • default task assignees in Sequences
  • User Group management
  • dropdown autocompletes and filters

Users can always list themselves. This ensures that a user can select themselves when needed, such as assigning themselves to a task.

Things to remember

  1. Users can always see and select themselves.
  2. Viewing a User Group also allows its members to be listed.
  3. Super Admin users have unrestricted visibility across the system.
  4. Config Admin users require the users.list permission to view all users.
  5. 1-time completion users cannot belong to User Groups.
  6. User-type fields may display configured users even when normal List permissions would otherwise prevent them from appearing.
  7. User Group visibility is controlled through User Group Permission Sets.
  8. The user who creates a User Group automatically becomes its Owner and a member of the group.
  9. The maximum number of User Groups you can have in your system is 1,000.