--- description: "The Information section provides details about a company and its corresponding group." keywords: "file, group information, manage group, business name, payment method, Fluid Attacks platform, Fluid Attacks documentation" other: private: false title: Manage a group's configuration --- # Manage a group's configuration import { Image } from "@/components/image"; ## Manage group information ### Group information fields You can find the information of your company and the [group](https://help.fluidattacks.com/portal/en/kb/articles/platform-faq#What_is_a_group) scrolling down the **Scope** section. Find group information fields on the Fluid Attacks platform

Find group information fields on the Fluid Attacks platform

The following are the descriptions of the fields: - **Business registration number:** The unique number that identifies your company as an incorporated entity - **Business name:** Legal name of your company - **Description:** A short and summarized description of the system(s) associated to the group - **Sprint length:** If you use sprints as part of your work methodology, this field specifies the number of weeks each sprint lasts for this group (if you do not change it, the default value is one week) - **Start date:** The start date of your team's project - **Report language:** Language in which your organization chooses to get reports (only English and Spanish are available) - **Payment:** The current payment configuration of the group (this information is visible to all group members but can only be modified by authorized Fluid Attacks members): - **Managed:** The group is using another payment method than a credit card, and this method has already been validated - **Not managed:** The group's payment method is credit card - **Under review:** Either payment is pending, a payment method's effectiveness is being validated, or a free trial has expired and a paid subscription is required to continue testing (**see the notes** below to learn how this option affects group access) - **Free trial:** The company is enjoying a free trial for which no payment method is required > [!TIP] > > **Notes:** > > 1. Filling out **business registration number** and **business name** is necessary for generating [security testing certificates](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities). > 2. When a group's value in the **Managed** field is **Under review**, group access is blocked for members **with the exception of Fluid Attacks staff**. > 3. Changing the **Managed** field value from **Under review** to a different value **reestablishes group access** to members without having to issue any [invitations](https://help.fluidattacks.com/portal/en/kb/articles/enable-and-disable-notifications#Access_granted). ### Edit group information > [!NOTE] > > **[Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required:** Group Manager If you need to make a change in the [group information fields](https://help.fluidattacks.com/portal/en/kb/articles/manage-a-group-s-configuration#Group_information_fields), just modifying the values in any of the fields activates the **Continue** button, which you should click in order to save changes. Change group information on the Fluid Attacks platform

Change group information on the Fluid Attacks platform

After changes are saved, you and other group members are sent a [notification](https://help.fluidattacks.com/portal/en/kb/articles/enable-and-disable-notifications#Updated_group_information) showing the current group information along with how it changed. > [!TIP] > > **Note:** The [Fluid Attacks staff roles](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Fluid_Attacks_staff_roles) that give the permission to edit these fields are [Customer Manager](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Customer_Manager) and [Admin](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Admin). ## Manage a group's information for context > [!NOTE] > > **[Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required:** User, Vulnerability Manager or Group Manager It is essential to make available information that gives the context of the system(s) for which group was created, both for your team members that are part of the project and for Fluid Attacks' security analysts to read. To find this information, you have to go to the Scope section of the [group](https://help.fluidattacks.com/portal/en/kb/articles/platform-faq#What_is_a_group) in question and scroll down to **Group context**. Edit group context on the Fluid Attacks platform

Edit group context on the Fluid Attacks platform

Click on **Edit** to modify the information. You can specify here the system's purpose and whether it is accessible through the Internet, among other helpful details. ## Manage disambiguation information for a group > [!NOTE] > > A Fluid Attacks [Admin](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Admin), [Architect](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Architect), [Customer Manager](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Customer_Manager), [Hacker](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Hacker), [Reattacker](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Reattacker), [Resourcer](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Resourcer), or [Reviewer](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Reviewer) role is required. Fluid Attacks' security analysts may sometimes write necessary clarifications on what should be tested in a group. These are visible only to other security analysts in the Scope section under **Disambiguation**. Manage disambiguation on the Fluid Attacks platform

Manage disambiguation on the Fluid Attacks platform

## Manage files shared with Fluid Attacks > [!NOTE] > > **[Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required:** User, Vulnerability Manager or Group Manager In the **Scope** section of your group, you can upload and download any files that may be useful or necessary for performing manual security testing on the software development project in question. To do this, scroll down to **Files**. Manage files on the Fluid Attacks platform

Manage files on the Fluid Attacks platform

To upload a file, follow these steps: 1. Click on the **Add** button. 1. In the pop-up window, click on the **Add file** button and choose the file you wish to upload. Its size must not exceed 5GB. Choose a file to upload on the Fluid Attacks platform

Choose a file to upload on the Fluid Attacks platform

1. Provide a description of how the file can be of use. Upload a file to the Fluid Attacks platform

1. Click on **Confirm** when you are done. When you have uploaded a file successfully it will be added to the table. If you want to download or remove a file, you have to click on its name and select the corresponding option in the pop-up window. Download or remove a file on the Fluid Attacks platform

Download or remove a file on the Fluid Attacks platform

> [!CAUTION] > > **The deletion of application files linked to specific environments is restricted**. This prevents these environments from running out of valid files and becoming unmanageable. In cases where you want to delete files, you must delete the entire environment. ## Manage group services > [!NOTE] > > A Fluid Attacks [Customer Manager](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Customer_Manager) or [Admin](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Admin) role, or a [Group Manager role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Group_Manager_role), is required. > [!CAUTION] > > Please bear in mind the following details when **downgrading from the Advanced plan**: > > 1. DAST for APIs and mobile apps stops. > 2. Vulnerabilities detected through [PTaaS](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Penetration_testing_as_a_service_PTaaS), [SCR](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Secure_code_review_SCR) and [RE](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Reverse_engineering_RE) are permanently deleted. > 3. Regaining [accuracy SLA](https://help.fluidattacks.com/portal/en/kb/articles/accuracy-sla) coverage requires a new [Health Check](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Health_Check) after reupgrading. The characteristics of the subscription of a group can be managed under **Services**, in the **Scope** section. Some Fluid Attacks members with access to the group can view this information in read-only mode. Manage group subscription on the Fluid Attacks platform

These are short descriptions of the above fields: - **Service type:** The Fluid Attacks solution the group is using (currently, clients can subscribe only to the all-in-one solution, [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/)) - **Type of testing:** Whether testing is done with or without access to source code - **White:** Fluid Attacks is given access to source code ([white-box testing](https://help.fluidattacks.com/portal/en/kb/articles/glossary#White_box) is performed) - **Black:** Fluid Attacks is not given access to source code ([black-box testing](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Black_box) is performed) - **Essential:** Security testing is performed with Fluid Attacks' automated tools - **Advanced:** In addition to all the features of the Essential plan, manual security testing is performed by Fluid Attacks' team of pentesters If you have the [necessary permission](https://help.fluidattacks.com/portal/en/kb/articles/manage-a-group-s-configuration#Manage_group_services), you can modify the plan subscription: 1. Make the necessary changes and click on the button below. This causes a pop-up window to appear. Change group plan on the Fluid Attacks platform

Change group plan on the Fluid Attacks platform

1. Review the changes in the pop-up window. You have to give observations about the change and write the name of the group where the change is being made. Confirm group subscription on the Fluid Attacks platform

Confirm group subscription on the Fluid Attacks platform

If you deactivate **Essential** or **Advanced**, you are asked the reason for this downgrade after confirming that you understand the implications. Downgrade plan on the Fluid Attacks platform

1. When you verify that everything is correct, click on the **Confirm...** button. After changes are made successfully, you and group members that have the [Updated services notification](https://help.fluidattacks.com/portal/en/kb/articles/enable-and-disable-notifications#Updated_services) enabled receive an email informing the changes made.