# Configure privileges for user groups

> For the complete documentation index, see [llms.txt](https://developers.thoughtspot.com/docs/llms.txt)

Source: https://developers.thoughtspot.com/docs/api-user-group-management

# Configure privileges for user groups

Each user group in ThoughtSpot assigns a set of privileges to its users. When a user is assigned to a group in ThoughtSpot, the default privileges associated with a group are assigned to its users.

ThoughtSpot also has a default group called `All`. When you create new users in ThoughtSpot, they are automatically added to `All`. By default, the members of `All` group do not have permission to download or upload data. You can use the Group API endpoints to globally add a privilege to `All`.

ThoughtSpot supports the following group privileges:

-   `DATADOWNLOADING`
    
    Allows users to download data from search results and Liveboards. When the `DATADOWNLOADING` privilege is applied, the users can download all the data sources that a group can access.
    
-   `USERDATAUPLOADING`
    
    Allows users to upload their data to ThoughtSpot.
    

## Add a privilege to a user group

To add a privilege to a group, send a `POST` request to the following endpoint URL:

POST /tspublic/v1/group/addprivilege

### Request parameters

 
| Form parameter | Description |
| --- | --- |
| 
`privilege`

 | 

_String_. The type of privilege to add. Valid values are `DATADOWNLOADING` and `USERDATAUPLOADING`.

 |
| 

`groupNames`

 | 

_String_. A JSON array of group names to which you want to add the privilege. To add a privilege to all user groups, specify `All`.

 |

### Example request

cURL

```cURL
curl -X POST --header 'Content-Type: application/x-www-form-urlencoded' --header 'Accept: application/json' --header 'X-Requested-By: ThoughtSpot' -d 'privilege=DATADOWNLOADING&groupNames=All'
'https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/addprivilege'
```

Request URL

https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/addprivilege

### Example response

204 - Success

## Remove a privilege from a user group

To delete a `DATADOWNLOADING` or `USERDATAUPLOADING` privilege from the system default `All` group, send a `POST` request to the following endpoint URL:

POST /tspublic/v1/group/removeprivilege

### Request parameters

 
| Form parameter | Description |
| --- | --- |
| 
`privilege`

 | 

_String_. Type of the privilege to delete. Valid values are `DATADOWNLOADING` and `USERDATAUPLOADING`.

 |
| 

`groupNames`

 | 

_String_. A JSON array of group names. To remove the privilege from all user groups, specify `All`.

 |

### Example request

cURL

```cURL
curl -X POST \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Accept: application/json' \
--header 'X-Requested-By: ThoughtSpot' \
-d 'privilege=USERDATAUPLOADING&groupNames=All' \
'https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/removeprivilege'
```

Request URL

https://{ThoughtSpot-Host}/callosum/v1/tspublic/v1/group/removeprivilege

### Example response

204 - Success