1 min lesson
Admin control plane
Use "Start with this check: Team and group membership are not conflated" to say what you would do next.
Step 1 of 3
The case: you can draw the org -> team -> group model and explain effective settings. Start with this check: Team and group membership are not conflated. Walk it once against a real situation so you can defend the call, not just assert it.
Learn more
Full explanation
Admin control plane
Enterprise Organizations — resolve effective settings for a cross-team pilot
Admin control plane
SayA large company keeps strict defaults on every team and wants a small 'Pilot Users' cohort, drawn from several teams, to try a new model with a higher spend ceiling. I keep the team defaults strict and widen for the cohort with an Organization Group, not by loosening a team.
DoIn the Organization, open Groups and create a manual 'Pilot Users' group, then add the pilot members from the Engineering, Data and Platform teams.
DoOn the group's Settings, use the Models tab to enable the new model, and set a per-user monthly spend limit higher than the teams carry.
SeeThe Engineering team still blocks that model for everyone else and keeps its lower cap. Only group members get the wider access.
SayNow I resolve the effective settings, because one person can sit in a team and a group at once.
SeeSpend limits take the most permissive applicable limit, so a pilot user gets the group's higher cap even though the team default is stricter. Model access combines the same way: a restrictive team default, widened by the group.
DoCheck a pilot user whose team and group carry different model access or spend settings.
SeeThe most permissive applicable setting wins across the user's team and groups: a wider group grant is not erased by a stricter team default, and a lower group limit does not reduce a wider team setting.
SeeThe proof point is the org -> team -> group model drawn correctly: teams hold defaults, groups can cut across them, and overlapping settings resolve most-permissive-wins. Team and group membership were never conflated.
Learn more
Optional practice
Practice: Admin control plane
QYou've applied it. What actually proves the work is done, not just a plausible answer?