Manage your user groups
You create user groups for the purpose of assigning certain roles to users, for:
- Device groups
- Contract and warranty shares
A role is a permission granted to the user group to access services such as patch management or Service Credits. Roles are assigned in the final step of the process of creating a device group or a contract and warranty share (referred to as a "share" below).

You can create a user group at any time:
You can also create a user group when you need it, during the process of creating a device group or a share:
To create a user group, first provide a name and description:
Add members and administrators, and submit:
You do not have to create a new user group for each device group or share. User groups have a many-to-many relationship with device groups and shares:
- A device group or share can have many user groups associated with it.
- A user group can be associated with many device groups and shares.
The roles enabled for each association are distinct. However, for some roles such as Software updates or Patch, as long as the role is enabled for you from one device group or share, you have access to that service.
Note: After adding new users to an existing user group, you may need to run the contracts and warranties update in order for the new users to obtain the privileges associated with the user group. See Run contract and warranty update for details.
Users in a user group are administrators or members. You are an administrator of any user group you create. User group administrators can perform these actions:
- Add and remove user group members
- Assign user group admin privilege to a member
- Delete the user group

When creating a device group or a share, the final step is to assign roles to each user group. Select the check boxes to assign the roles:
If you want to assign different roles to different groups of users, use a separate user group for each role.
Role names and descriptions are grayed out if there is no contract or warranty associated with the device group or share that enables them. You can still check a role that is grayed out. This allows you to set the user group up with the roles it needs ahead of time. Adding a contract or warranty at a later time that covers the role will activate a grayed-out role that you have checked.
Roles for device groups and shares are as follows:
Role | Description |
---|---|
Device group administrator and member | See Device group administrator and member actions for details. |
Service Credits administrator* | Can redeem credits for services, schedule, reschedule, cancel services, receive notifications of scheduled or expiring credits. |
Service Credits member* | Can view: Service Credits, HPE Services exchanged for those credits, HPE services available for exchange of those credits. |
Patch management* | Can access the patch management page, and patches for operating systems. |
Diagnostic passwords* | Get passwords for HPE support tools for certain products. |
Software updates and licensing* | Populates the list of SAIDs in the drop-down list at the initial page of the My HPE Software Center site (following the link on the HPE Support Center home page). |
* If a share, enabled directly by a contract in the share. If a device group, enabled indirectly by a contract associated with a device in the device group.

If you assign a new or existing user group to the device group or share you are creating, the roles you assign to the user group apply equally to every user in the user group.
You are assigning roles to the group as a whole--it does not matter whether any given user is an administrator or a member of the user group itself.
In the table below for example, two user groups are created for a device group. One of the user groups is assigned the role of device group administrator and the other the role of device group member.
Note that Francis Lee, though only a member of the user group, becomes an administrator of the device group. Similarly Pradesh Jones and Akiko Yamada, though administrators of the user group, become members of the device group:
User groups and users | User group privilege | Assign this device group role to the user group | Device group role |
---|---|---|---|
"Paris device group admins" | |||
- Marie Curie | admin | admin | admin |
- Francis Lee | member | admin | |
"Paris device group members" | |||
- Pradesh Jones | admin | member | member |
- Akiko Yamada | admin | member |
If you want everyone in the user group to have administrator role for the device group or share, you only need one user group. Assigning device group administrator and share administrator roles does not enable other roles.

When you register devices remotely you assign your HPE Passport ID to those devices. When you sign in to Insight Online with that same ID, those devices appear in the main devices view in your Insight Online My IT Environment tab. These devices are in your default device group, which is created automatically.
At the same time, a default user group and default contract and warranty share are created, whose names have the same structure as the default device group (using HPE Passport profile first and last name):
Default structure | Example |
---|---|
Default device group |
Marie Curie devices See Your default device group for details. |
Default user group | Marie Curie default user |
Default contract and warranty share |
Marie Curie devices (same as default device group name) See Derived contracts and warranties for details. |
You are the only user in your default user group, and you cannot modify it. If you want other users to access your device groups or shares, create a separate user group.