"We already have the base groups created and assigned policies to them. But we now have a case where we created a custom policy and need to assign it only to a specific group of people. These people are from different base groups, and the policy only applies to them, but other policies should apply to them as well.
So, to be more exact, we have created a credit card usage policy, and only 12 people have access to company credit cards, and there is no need to assign the policy to everyone in the company if only 12 people are going to be using the company credit cards."
Stefan Lendl
•
Dec 11, 2025
Upvote! This is really important if I manage more than one management system inside Secfix.
Max Vogt
•
Jul 8, 2025
Similar Feedback from Hugo Vieira - Allow assigning users to multiple groups for more flexible policy management
In our organization, many team members wear multiple hats—someone might be part of the ISMS Governance Council while also working in Engineering or DevOps. Right now, Secfix only allows a user to belong to one group at a time, which makes policy assignment quite limiting and forces us to choose the "most relevant" group. This creates a risk that users might miss policies applicable to their other roles, or we end up duplicating policies across multiple groups to compensate.
What would be really helpful is the ability to assign a single user to multiple groups, with the system merging the assigned policies so that the user sees and acknowledges everything relevant to all of their responsibilities. This would make the tool more scalable and maintainable as our org grows and roles become more complex.
Log in to comment and vote
Comments4
Fidel Esquivel
Jan 28
Agreed. Definitely needed.
Bedriye Hatip
Jan 6
Commenting on behalf of Yll F.
"We already have the base groups created and assigned policies to them. But we now have a case where we created a custom policy and need to assign it only to a specific group of people. These people are from different base groups, and the policy only applies to them, but other policies should apply to them as well.
So, to be more exact, we have created a credit card usage policy, and only 12 people have access to company credit cards, and there is no need to assign the policy to everyone in the company if only 12 people are going to be using the company credit cards."
Stefan Lendl
Dec 11, 2025
Upvote! This is really important if I manage more than one management system inside Secfix.
Max Vogt
Jul 8, 2025
Similar Feedback from Hugo Vieira - Allow assigning users to multiple groups for more flexible policy management
In our organization, many team members wear multiple hats—someone might be part of the ISMS Governance Council while also working in Engineering or DevOps. Right now, Secfix only allows a user to belong to one group at a time, which makes policy assignment quite limiting and forces us to choose the "most relevant" group. This creates a risk that users might miss policies applicable to their other roles, or we end up duplicating policies across multiple groups to compensate.
What would be really helpful is the ability to assign a single user to multiple groups, with the system merging the assigned policies so that the user sees and acknowledges everything relevant to all of their responsibilities. This would make the tool more scalable and maintainable as our org grows and roles become more complex.