Evidence Groups overview

Evidence Groups enable organizations to automatically assign evidence ownership to a group, and automate evidence access based on group membership. While users can be members or monitors of multiple groups at one time, each user and each piece of evidence can only be assigned to one Evidence Group at a time.

Every existing group can use the Evidence Group functionality. Each piece of evidence will still have a Recorded By attribute, which must be populated with a user, but will also have an associated Evidence Group attribute.

The primary difference between a Group and an Evidence Group is how they enable access to evidence. Group Monitors can access all evidence owned by Group Members, as long as the user who recorded the evidence is still a member of the group. Evidence Groups allow evidence to be assigned to the group, and users with the appropriate permissions can access that evidence. This ensures users with the appropriate permissions can always access all evidence assigned to their groups, even if the user who recorded the evidence is no longer a member of the group.