Groups

What Are Groups?

When applying policies based on user identity, using group membership is often more scalable and maintainable than managing individual users.

For example, you might want to create policies specific to departments such as Marketing, Finance, or Engineering.

To support this, Nullafi Shield can integrate with your organization’s directory service (e.g., Google Workspace, Microsoft EntraID, LDAP) to apply group-based rules.

See the Directory Integrations section for setup instructions.

Group Management

Directories typically contain hundreds of groups, many of which are irrelevant for data access policy enforcement. Nullafi Shield allows administrators to control which groups are visible in the Admin Console to streamline the policy creation process.

Hiding Groups from Policy Selection

To hide one or more groups:

  1. Select the checkbox next to each group name.
  2. Click the Hide Group in Policy button at the bottom of the screen.

Hidden groups will no longer appear in dropdowns or filters when building policies.

Restoring Hidden Groups

To restore hidden groups so they can be used in policy creation:

  1. Click the Show hidden groups toggle at the top of the page.
  2. Select the checkbox next to each group you want to restore.
  3. Click the Show Group in Policy button at the bottom of the screen.

By managing which groups are visible in the Admin Console, administrators can focus only on those groups that are relevant for data protection and compliance enforcement.