[blakeaowens]

Description

Documents group ownership of Triage Engine rules and Report Builder templates, a DefectDojo Pro feature:

• Groups own rules, templates, blocks, themes and schedules; the Group, Specific Groups and Everyone visibility, Share and Transfer, and the instance tier every existing item keeps.
• Each group's automation identity: the service user its rules and report schedules run as, with exactly the group's access.
• The role editor's Group Content table, the seven node-family permissions under Rule, and the steps to give a group its own rule writers (clone Maintainer, add the Rule permissions, assign it as the membership role).
• The rule editor's Runs As panel, the node palette, findings a rule may not edit (skipped and counted in the run trace), and the names a group's rule may reference.
• Import matching rules by identifier (names are no longer unique), with Create, Skip and Overwrite.
• The group page's Rules, Report Templates and Schedules tabs, and Settings > Unowned Content.
• The /api/v2/ share/ and transfer/ actions and the scope and owner_group list filters.
• The Group Ownership feature flag is off by default, and the pages say what turning it on grants (the built-in Writer, Maintainer and Owner roles carry Report Template Add, Edit and Delete).
• Archive Findings and Delete Findings Permanently act only on Findings the rule's identity may edit or delete.
• Changing a group's rule needs Rule Edit and membership of the owning group; deleting it needs only Rule Delete.
• Preview in the rule editor runs with the viewer's own access, not the group's.
• Owned By must be picked before a rule is saved, a template adopted or rules imported when there is more than one choice; Duplicate asks where the copy goes.
• An Unowned item cannot be shared until it is transferred; a template keeps blocks and themes already on it, and a schedule moves into a group only after its template.
• With the Group Ownership flag off, the role editor lists Rule and Report Template under Global Feature Permissions; a group's automation identity cannot be disabled through the Users API, and its name follows the group's.

English pages only; the other languages are translated automatically.