Managing permissions for ConneX

ConneX looks at a number of Microsoft Entra ID groups to determine which users can create which types of workspace. If configured correctly, new ConneX users can simply be added to the correct group to have the right permissions. As with all permissions we recommend applying these using groups rather than adding individuals.

In general, when browsing workspaces in ConneX users can only see those they have permissions to, even if they only have View permissions, except for Atlas ConneX Enterprise Administrators who can see all workspaces regardless of permissions.

ConneX Security Groups

The following Security groups are created in Microsoft 365 as part of an Atlas deployment:

Group Name	ConneX Permissions
Atlas ConneX Enterprise Administrators	Full access to see, create, edit and delete all workspaces using any template, as well as manage the templates in ConneX Studio. Also provides the ability to manage all existing m365 workspaces in your tenant and view them in ConneX, but does not grant any additional permissions to the existing sites or content
Atlas ConneX All Teams Creators	Ability to create Collaboration workspaces using any template
Atlas ConneX Creators	Ability to create any workspace using any template
Atlas ConneX Communication Workspace Creators	Ability to create workspaces using the Communication workspace template
Atlas ConneX Knowledge Workspace Creators	Ability to create workspaces using the Knowledge workspace templates
Atlas ConneX Legal Workspace Creators	Ability to create workspaces using the Legal workspace templates
Atlas ConneX Workspace Template Managers	Ability to access and manage templates from within ConneX Studio. If you are unable to be an Enterprise Administrator, you will need to be part of this group in order to see and access ConneX Studio for workspace templating