Set Up Your First Team

This guide walks you through creating a group, adding users, and assigning governance roles—the foundation for managing access in ONE.

Before you start

You need to be an environment admin. See Environment admins.
Familiarize yourself with Groups and Governance Roles.

When you first log in to ONE, you’ll find a single group called "Organization" at the root of the hierarchy. You create your team structure under this root group.

You can rename the root group as needed.

Step 1: Create a group

Groups organize users into teams. Create one for each team that works with shared data.

Go to Global settings > User management > Groups.

To access Global settings, select the Ataccama logo.
Select Create.
Enter a Name for the group (for example, "Data Quality Team").
(Optional) Add a Description to clarify the group’s purpose or provide other useful information.
Select a Parent group under which the team should sit in the hierarchy.
Select Save and publish.

Start with a simple, flat structure. You can add child groups later as needs evolve.

Step 2: Create governance roles

Before you can add users to a group, create the governance roles you’ll assign to them.

If your environment has predefined roles, you can skip to Step 3: Add governance roles to the group.

Go to Global settings > User management > Governance roles.
Select Create.
Enter a Name for the role (for example, "Data Steward").
(Optional) Add a Description to clarify the role’s purpose or provide other useful information.
(Optional) Select Assign to new groups if this role should be automatically available in newly created groups.
In Order, specify where this role appears in lists (lower numbers appear first). For example, for "Administrator", you can set this to 1, for "Data Steward" to 3, and for "Data Consumer" to 5.
Select the appropriate access level for each asset type: View metadata, View data, Editing, Full access. If an access level is not available, it cannot be applied to that asset type.
Select Save and Publish.
Repeat for other roles as needed.

Now add these roles to your group.

Start with 3-4 roles such as Data Owner, Data Steward, and Data Consumer. See Which governance roles to use for guidance.

Step 3: Add governance roles to the group

Define which governance roles exist within this group.

On the group details screen, in Group roles, select Assign governance role and choose from the list.

If you have any predefined governance roles available, review them and add or remove as needed. To remove the roles you don’t need, delete them using the bin icon.
Select Save and publish.

Step 4: Add users to the group

Add users by assigning them to governance roles. You can assign roles to:

Identity provider roles — All users with that IDP role automatically get the governance role. Reduces manual work but might be too broad for sensitive areas.
Individual users — Specific users get the governance role. Offers more control but requires manual updates.

You can combine both approaches within the same group.

On the group details screen, in Group roles, find the role you want to assign.
- Under Identity provider role, select Add to include all users with a specific IDP role.
- Under User, select Add to include individual users.
Repeat for other roles as needed.
Select Save and publish.

Next steps

Your team is now set up. To start working with assets:

Assign Stewardship — Make this group the steward of relevant assets.
Share an Asset — Give this group access to assets owned by others.
Manage Users in Your Organization — Learn how to manage users in ONE.

Was this page useful?