Migration to the Kahua’s new Group membership model

We have created a new model for managing a user’s membership in Groups in Kahua. This model is being used in all newly created domains and existing domains are being migrated to this new model.

Membership in a group controls a user’s access to partitions and projects and their permissions for applications. Previously, membership in groups was inherited down the partition and project hierarchy until that membership was overridden and changed.

In the new model, administrators explicitly select the level at which a user is added to a domain and determine if the user should have access to projects or partitions lower in the hierarchy.

This new model is a prerequisite for our upcoming User Management functionality, which will simplify how users are added to Kahua.

For more information on using the new model, refer to Setting up groups under User Management.

Frequently Asked Questions

When you add a user to a group, you can determine their access to your current level in the domain hierarchy (i.e., the currently open partition or project as indicated in the Kahua header) by selecting one of the following three options:

  • Include this level and child levels - This selection grants access to the current level and to all child levels below this one in the hierarchy.

  • Include this level only and exclude child levels - This selection grants access to only this level. It does not grant access to any child levels below this one in the hierarchy.

  • Exclude this level and child levels - This selection excludes the user from having access at this level and child levels below this one in the hierarchy. It is used when a user has been granted access at a higher level but needs to be removed at this level and below.

To remove a user completely from a group, navigate to the level in the hierarchy where they were first added to the group and select Remove.

For more detailed information on managing group membership using the new model, refer to Manage members in a group.

We anticipate that all domains will be migrated by May 2026. If you have questions about your migration, please reach out to support or your Kahua account representative.

No, we do not anticipate any downtime during the migration. If that changes, we will communicate that ahead of time.

No changes are intended. When the migration is complete, your users should be members of the same groups as they were prior to the migration and retain the same permissions.

If you have concerns about a user’s access to projects or their permissions after migration, you can confirm their group memberships, assigned access levels, and the group’s assigned roles by generating the User Access Report (Users app > Reports > User Access Report) or selecting View Permissions from a user's detail page in the Users app. Refer to View reports on user permissions or recent activity history.

Contact support with this information and provide the expected access vs actual access.