This guide is for admins and owners who need to restrict access to sensitive content. Private access groups ensure that only explicitly added members can see, search, or ask questions about the content tagged within them.
If you have not yet created any access groups, complete the Setting up access groups and Permissions guide first.
Create private access groups where only explicitly added members can access content. By the end of this guide, you will have a private access group configured, members assigned, sensitive documents uploaded and tagged, and isolation verified so non-members cannot see the content.
Click "Create access group"
In the Access groups section, click Create access group.
Name the access group
Enter a name such as Legal, HR, or Executive Team. Use names your team will immediately recognize.
Toggle "Private" On
Set the visibility to Private before clicking Create.
Add Member
Only add people who need access. You can always add more later. Click on the new access group, then click Add Member. Select only the team members who require access to this sensitive content.
Verify Isolation
Confirm that non-members cannot see, search, or ask questions about private access group content. Log in as a non-member (or ask a colleague who is not in the access group to check). Confirm they cannot find the private content in Search, Ask, Library, or Library → Graph.
Manage Access Over Time
Add or remove members as roles change. Remove departed employees promptly to maintain security. Periodically review access group membership and remove anyone who no longer needs access.