Groups
Groups control which applications users can access on your QuickBox Pro server. While roles determine administrative capabilities, groups determine which software each user can see, install, and manage. A user’s Package Management catalog on the App Dashboard is filtered by their group membership — they can only install, remove, reinstall, and update applications that their group allows. Assign users to groups, and configure each group with the application categories it should have access to. Groups also carry Asset Management Center permissions and default storage quotas for their members.
Groups requires admin privileges. admin.groups.read is needed to view groups, and admin.groups.manage is needed to create, edit, or delete groups. Navigate to User Management > User Groups from the sidebar.
Key features
Application Access Control
Assign access to all 11 software categories — users only see apps in their group's allowed categories
Group Membership
Add and remove users from groups to manage their application access
Custom Groups
Create custom groups with tailored application access for different user types
Group Metrics
See member counts, app access totals, and usage at a glance
Filter & Search
Filter groups by type (system, custom, has users, has apps, empty) and search by name
System Protection
Default system groups cannot be deleted — they always exist as a baseline
Default groups
QuickBox Pro ships with two system groups:
| Group | Priority | Type | Application Access |
|---|---|---|---|
Administrator | 100 | System | All applications in all 11 categories |
Access | 10 | System | Download clients only |
System groups cannot be deleted. The Administrator group’s app access can be modified, but admin-level users are always members of this group and cannot be removed from it.
Creating groups
To create a custom group:
- Click the Create Group button
- Enter a group name and optional description
- Select which application categories the group should have access to — you can select entire categories or individual applications
- Save the group
Custom groups are useful when you want different users to have access to different sets of applications. For example, you might create a “Media Users” group with access to media servers and download clients, and a “Managers” group with access to media management and automation tools.
Managing group members
Add or remove users from a group through the group editor:
- Add members — Select users to add to the group
- Remove members — Remove users from the group
A user can belong to multiple groups. Their effective application access is the union of all their groups’ permissions — if any group they belong to grants access to an application, they can use it.
Application categories
Groups grant access to applications organized in 11 categories:
| Category | Includes |
|---|---|
Media Management | Sonarr, Radarr, Lidarr, Bazarr, and more |
Media Servers | Plex, Jellyfin, Emby, Tautulli, and more |
Media Requests | Overseerr, Jellyseerr, Ombi, and more |
Download Clients | qBittorrent, Deluge, rTorrent, SABnzbd, and more |
Indexers & Trackers | Prowlarr, Jackett, Autobrr, and more |
Automation & Tools | FileBot, FlexGet, Unpackerr, and more |
File Management | Nextcloud, Syncthing, Duplicati, and more |
E-Books & Comics | Calibre, Kavita, Komga |
Remote Access | noVNC, X2Go |
Communication | The Lounge, Quassel, ZNC |
Utilities & System | Netdata, Fail2ban, WireGuard, and more |
When editing a group, you can select entire categories or pick individual applications within each category for fine-grained control.
Asset Management Center access
The group editor includes an Asset Management Center block that controls media capabilities and storage for the group’s members:
- Media permissions — Grant
media.library.use(upload and manage own assets),media.share.create(create public share links), andmedia.share.email(email share links) to all members of the group - Default storage quota — An optional media storage quota in GB that applies to every member who does not have an explicit per-user override. Leave it empty for no group default
The groups table shows a Media column summarizing each group’s quota and granted permission count.
If a user belongs to multiple groups with quotas, the highest group quota applies. A per-user override set in User Admin always wins over the group default, and an explicit per-user permission Deny beats a group grant. See the Asset Management Center page for the full inheritance model.
Default registration group
You can designate any group (except Administrator) as the default group for new registrations. When a new user registers, they are automatically assigned to this group, which determines their initial application access.
- Set the default registration group from the group list by selecting a group’s context menu
- The setting defaults to the Access group
- The Administrator group cannot be set as the default
This setting is shared with Registration Settings. Changing the default group here automatically reflects on the Registration Settings page, and vice versa.
Best practices
Do
- Use groups to separate different types of users — for example, media consumers who only need access to media servers vs power users who also need download clients and automation tools
- Keep the default Access group as a baseline for regular users and create additional groups for expanded access
- Name groups clearly so their purpose is obvious — 'Media Team', 'Download Users', 'Full Access' are better than 'Group 1', 'Group 2'
- Review group membership when adding new applications to ensure the right users have access
Don't
- Don't give all groups access to all categories unless every user on the server should see every application
- Don't forget that group access is additive — a user in multiple groups gets access to the union of all their groups' applications
- Don't delete a system group — they cannot be deleted and attempting to do so will show an error
FAQ
Related pages
Assign users to groups when creating or editing accounts
Manage admin capabilities with the RBAC permission system
Set default quotas, default group, and policies for new users
The media features that group permissions and quotas govern
Join the Community
Media server operators sharing configs, getting support, and shaping the future of QuickBox Pro.