Represents a GitLab group — a namespace that can contain projects and subgroups. Groups model organizational units and form the primary RBAC boundary. A user's role in a parent group is automatically inherited down to all subgroups and their projects via GL_InheritRole edges. Groups can be shared into other groups or projects (GL_InvitedTo), which grants the shared group's members access up to a specified role level.
Top-level groups are linked directly to the GL_Instance node via GL_HasGroup. Subgroups are connected to their parent via GL_MemberOf.
| Property Name | Data Type | Description |
|---|---|---|
| name | string | Group display name |
| description | string | Group description |
| visibility | string | Visibility level: private, internal, or public |
| full_name | string | Full path including parent namespaces (e.g., ParentOrg / SubGroup) |
| web_url | string | URL to the group's GitLab page |
| shared_runners_setting | string | Whether shared (instance) runners are enabled for this group's projects |
| require_two_factor_authentication | bool | Whether 2FA is required for all members of this group |
flowchart TD
GL_Instance[fa:fa-building GL_Instance]
GL_Group[fa:fa-user-group GL_Group]
GL_Project[fa:fa-diagram-project GL_Project]
GL_GroupRole[fa:fa-user-tie GL_GroupRole]
GL_GroupVariable[fa:fa-sliders GL_GroupVariable]
GL_InstanceRole[fa:fa-user-tie GL_InstanceRole]
GL_Runner[fa:fa-gears GL_Runner]
GL_GroupAccessToken[fa:fa-key GL_GroupAccessToken]
GL_Instance -.->|GL_HasGroup| GL_Group
GL_Group -.->|GL_HasProject| GL_Project
GL_Group -->|GL_MemberOf| GL_Group
GL_GroupRole -->|GL_MemberOf| GL_Group
GL_Group -->|GL_Defines| GL_GroupVariable
GL_Group -->|GL_InvitedTo| GL_Group
GL_Group -->|GL_InvitedTo| GL_Project
GL_GroupRole -.->|GL_CanCreateGroup| GL_Group
GL_GroupRole -.->|GL_CanCreateProject| GL_Group
GL_InstanceRole -.->|GL_CanRequestAccess| GL_Group
GL_GroupRole -->|GL_ManageMembers| GL_Group
GL_GroupRole -.->|GL_ManageVariables| GL_Group
GL_GroupRole -.->|GL_InviteGroups| GL_Group
GL_Runner -.->|GL_AssignedTo| GL_Group
GL_Group -.->|GL_CanUseRunner| GL_Runner
GL_Group -.->|GL_HasToken| GL_GroupAccessToken