Team group (#2864)

* feat(member-group): Team (#2616) * feat: member-group schema define * feat(fe): create group * feat: add group edit modal * feat(fe): add avatar group component * feat: edit group fix: permission select menu style * feat: bio-mode support for select-member component * fix: avatar group key unique * feat: group manage * feat: divide member into group and clbs * feat: finish team permission * chore: adjust * fix: get clbs * perf: groups code * pref: member group for team (#2706) * chore: fe adjust fix: remove the member from groups when removing from team feat: change the groups avatar when updating the team's avatar * chore: DefaultGroupName as a constant string '' * fix: create default group when create team for root * feat: comment * feat: 4811 init * pref: member group for team (#2732) * chore: default group name * feat: get default group when get by tmbid * feat(fe): adjust * member ui * fix: delete group (#2736) * perf: init4811 * pref: member group (#2818) * fix: update clb per then refetch clb list * fix: calculate group permission * feat(fe): group tag * refactor(fe): team and group manage * feat: manage group member * feat: add group transfer owner modal * feat: group manage member * chore: adjust the file structure * pref: member group * chore: adjust fe style * fix: ts error * chore: fe adjust * chore: fe adjust * chore: adjust * chore: adjust the code * perf: i18n and schema name * pref: member-group (#2862) * feat: group list ordered by updateTime * fix: transfer ownership of group when deleting member * fix: i18n fix * feat: can not set member as admin/owner when user is not active * fix: GroupInfoModal hover input do not change color * fix(fe): searchinput do not scroll * perf: team group ui * doc * remove enum --------- Co-authored-by: Finley Ge <32237950+FinleyGe@users.noreply.github.com>
2025-07-22 20:37:48 +00:00 · 2024-10-09 18:32:10 +08:00
parent 7afa8f00b8
commit 3a4b4a866b
80 changed files with 2670 additions and 751 deletions
--- a/packages/global/common/error/code/team.ts
+++ b/packages/global/common/error/code/team.ts
@@ -10,7 +10,12 @@ export enum TeamErrEnum {
  appAmountNotEnough = 'appAmountNotEnough',
  pluginAmountNotEnough = 'pluginAmountNotEnough',
  websiteSyncNotEnough = 'websiteSyncNotEnough',
-  reRankNotEnough = 'reRankNotEnough'
+  reRankNotEnough = 'reRankNotEnough',
+  groupNameEmpty = 'groupNameEmpty',
+  groupNameDuplicate = 'groupNameDuplicate',
+  groupNotExist = 'groupNotExist',
+  cannotDeleteDefaultGroup = 'cannotDeleteDefaultGroup',
+  userNotActive = 'userNotActive'
 }

 const teamErr = [
@@ -46,6 +51,26 @@ const teamErr = [
  {
    statusText: TeamErrEnum.reRankNotEnough,
    message: i18nT('common:code_error.team_error.re_rank_not_enough')
+  },
+  {
+    statusText: TeamErrEnum.groupNameEmpty,
+    message: i18nT('common:code_error.team_error.group_name_empty')
+  },
+  {
+    statusText: TeamErrEnum.groupNotExist,
+    message: i18nT('common:code_error.team_error.group_not_exist')
+  },
+  {
+    statusText: TeamErrEnum.cannotDeleteDefaultGroup,
+    message: i18nT('common:code_error.team_error.cannot_delete_default_group')
+  },
+  {
+    statusText: TeamErrEnum.groupNameDuplicate,
+    message: i18nT('common:code_error.team_error.group_name_duplicate')
+  },
+  {
+    statusText: TeamErrEnum.userNotActive,
+    message: i18nT('common:code_error.team_error.user_not_active')
  }
 ];

--- a/packages/global/common/file/image/constants.ts
+++ b/packages/global/common/file/image/constants.ts
@@ -7,6 +7,7 @@ export enum MongoImageTypeEnum {
  datasetAvatar = 'datasetAvatar',
  userAvatar = 'userAvatar',
  teamAvatar = 'teamAvatar',
+  groupAvatar = 'groupAvatar',

  chatImage = 'chatImage',
  collectionImage = 'collectionImage'
@@ -36,6 +37,10 @@ export const mongoImageTypeMap = {
    label: 'teamAvatar',
    unique: true
  },
+  [MongoImageTypeEnum.groupAvatar]: {
+    label: 'groupAvatar',
+    unique: true
+  },

  [MongoImageTypeEnum.chatImage]: {
    label: 'chatImage',
--- a/packages/global/common/system/constants.ts
+++ b/packages/global/common/system/constants.ts
@@ -1,3 +1,4 @@
 export const HUMAN_ICON = `/icon/human.svg`;
 export const LOGO_ICON = `/icon/logo.svg`;
 export const HUGGING_FACE_ICON = `/imgs/model/huggingface.svg`;
+export const DEFAULT_TEAM_AVATAR = `/imgs/avatar/defaultTeamAvatar.svg`;
--- a/packages/global/support/permission/collaborator.d.ts
+++ b/packages/global/support/permission/collaborator.d.ts
@@ -1,3 +1,4 @@
+import { RequireAtLeastOne, RequireOnlyOne } from '../../common/type/utils';
 import { Permission } from './controller';
 import { PermissionValueType } from './type';

@@ -10,6 +11,19 @@ export type CollaboratorItemType = {
 };

 export type UpdateClbPermissionProps = {
-  tmbIds: string[];
+  members?: string[];
+  groups?: string[];
  permission: PermissionValueType;
 };
+
+export type DeleteClbPermissionProps = RequireOnlyOne<{
+  tmbId: string;
+  groupId: string;
+}>;
+
+export type UpdatePermissionBody = {
+  permission: PermissionValueType;
+} & RequireOnlyOne<{
+  memberId: string;
+  groupId: string;
+}>;
--- a/packages/global/support/permission/constant.ts
+++ b/packages/global/support/permission/constant.ts
@@ -61,7 +61,7 @@ export const PermissionList: PermissionListType = {
  [PermissionKeyEnum.write]: {
    name: i18nT('common:permission.write'),
    description: '',
-    value: 0b110, // 如果某个资源有特殊要求，再重写这个值
+    value: 0b110,
    checkBoxType: 'single'
  },
  [PermissionKeyEnum.manage]: {
--- a/packages/global/support/permission/controller.ts
+++ b/packages/global/support/permission/controller.ts
@@ -1,9 +1,10 @@
-import { PermissionValueType } from './type';
+import { PermissionListType, PermissionValueType } from './type';
 import { PermissionList, NullPermission, OwnerPermissionVal } from './constant';

 export type PerConstructPros = {
  per?: PermissionValueType;
  isOwner?: boolean;
+  permissionList?: PermissionListType;
 };

 // the Permission helper class
@@ -13,9 +14,10 @@ export class Permission {
  hasManagePer: boolean;
  hasWritePer: boolean;
  hasReadPer: boolean;
+  _permissionList: PermissionListType;

  constructor(props?: PerConstructPros) {
-    const { per = NullPermission, isOwner = false } = props || {};
+    const { per = NullPermission, isOwner = false, permissionList = PermissionList } = props || {};
    if (isOwner) {
      this.value = OwnerPermissionVal;
    } else {
@@ -23,9 +25,10 @@ export class Permission {
    }

    this.isOwner = isOwner;
-    this.hasManagePer = this.checkPer(PermissionList['manage'].value);
-    this.hasWritePer = this.checkPer(PermissionList['write'].value);
-    this.hasReadPer = this.checkPer(PermissionList['read'].value);
+    this._permissionList = permissionList;
+    this.hasManagePer = this.checkPer(this._permissionList['manage'].value);
+    this.hasWritePer = this.checkPer(this._permissionList['write'].value);
+    this.hasReadPer = this.checkPer(this._permissionList['read'].value);
  }

  // add permission(s)
@@ -36,36 +39,39 @@ export class Permission {
  // perm.add(PermissionList['read'], PermissionList['write'])
  // perm.add(PermissionList['read']).add(PermissionList['write'])
  addPer(...perList: PermissionValueType[]) {
-    for (let oer of perList) {
-      this.value = this.value | oer;
+    if (this.isOwner) {
+      return this;
+    }
+    for (const per of perList) {
+      this.value = this.value | per;
    }
    this.updatePermissions();
-    return this.value;
+    return this;
  }

  removePer(...perList: PermissionValueType[]) {
-    for (let per of perList) {
+    if (this.isOwner) {
+      return this.value;
+    }
+    for (const per of perList) {
      this.value = this.value & ~per;
    }
    this.updatePermissions();
-    return this.value;
+    return this;
  }

  checkPer(perm: PermissionValueType): boolean {
    // if the permission is owner permission, only owner has this permission.
    if (perm === OwnerPermissionVal) {
      return this.value === OwnerPermissionVal;
-    } else if (this.hasManagePer) {
-      // The manager has all permissions except the owner permission
-      return true;
    }
    return (this.value & perm) === perm;
  }

  private updatePermissions() {
    this.isOwner = this.value === OwnerPermissionVal;
-    this.hasManagePer = this.checkPer(PermissionList['manage'].value);
-    this.hasWritePer = this.checkPer(PermissionList['write'].value);
-    this.hasReadPer = this.checkPer(PermissionList['read'].value);
+    this.hasManagePer = this.checkPer(this._permissionList['manage'].value);
+    this.hasWritePer = this.checkPer(this._permissionList['write'].value);
+    this.hasReadPer = this.checkPer(this._permissionList['read'].value);
  }
 }
--- a/packages/global/support/permission/memberGroup/constant.ts
+++ b/packages/global/support/permission/memberGroup/constant.ts
@@ -0,0 +1,23 @@
+import { PermissionKeyEnum, PermissionList } from '../constant';
+import { PermissionListType } from '../type';
+
+export enum GroupMemberRole {
+  owner = 'owner',
+  admin = 'admin',
+  member = 'member'
+}
+
+export const memberGroupPermissionList: PermissionListType = {
+  [PermissionKeyEnum.read]: {
+    ...PermissionList[PermissionKeyEnum.read],
+    value: 0b100
+  },
+  [PermissionKeyEnum.write]: {
+    ...PermissionList[PermissionKeyEnum.write],
+    value: 0b010
+  },
+  [PermissionKeyEnum.manage]: {
+    ...PermissionList[PermissionKeyEnum.manage],
+    value: 0b001
+  }
+};
--- a/packages/global/support/permission/memberGroup/type.d.ts
+++ b/packages/global/support/permission/memberGroup/type.d.ts
@@ -0,0 +1,27 @@
+import { TeamMemberItemType } from 'support/user/team/type';
+import { TeamPermission } from '../user/controller';
+import { GroupMemberRole } from './constant';
+
+type MemberGroupSchemaType = {
+  _id: string;
+  teamId: string;
+  name: string;
+  avatar: string;
+  updateTime: Date;
+};
+
+type GroupMemberSchemaType = {
+  groupId: string;
+  tmbId: string;
+  role: `${GroupMemberRole}`;
+};
+
+type MemberGroupType = MemberGroupSchemaType & {
+  members: {
+    tmbId: string;
+    role: `${GroupMemberRole}`;
+  }[]; // we can get tmb's info from other api. there is no need but only need to get tmb's id
+  permission: TeamPermission;
+};
+
+type MemberGroupListType = MemberGroupType[];
--- a/packages/global/support/permission/type.d.ts
+++ b/packages/global/support/permission/type.d.ts
@@ -1,3 +1,4 @@
+import { RequireOnlyOne } from '../../common/type/utils';
 import { TeamMemberWithUserSchema } from '../user/team/type';
 import { AuthUserTypeEnum, PermissionKeyEnum, PerResourceTypeEnum } from './constant';

@@ -20,11 +21,13 @@ export type PermissionListType<T = {}> = Record<

 export type ResourcePermissionType = {
  teamId: string;
-  tmbId: string;
  resourceType: ResourceType;
  permission: PermissionValueType;
  resourceId: string;
-};
+} & RequireOnlyOne<{
+  tmbId: string;
+  groupId: string;
+}>;

 export type ResourcePerWithTmbWithUser = Omit<ResourcePermissionType, 'tmbId'> & {
  tmbId: TeamMemberWithUserSchema;
--- a/packages/global/support/permission/user/constant.ts
+++ b/packages/global/support/permission/user/constant.ts
@@ -1,19 +1,22 @@
-import { PermissionKeyEnum, PermissionList, ReadPermissionVal } from '../constant';
+import { PermissionKeyEnum } from '../constant';
 import { PermissionListType } from '../type';
-import { i18nT } from '../../../../web/i18n/utils';
+import { PermissionList } from '../constant';
 export const TeamPermissionList: PermissionListType = {
  [PermissionKeyEnum.read]: {
    ...PermissionList[PermissionKeyEnum.read],
-    description: i18nT('user:permission_des.read')
+    value: 0b100
  },
  [PermissionKeyEnum.write]: {
    ...PermissionList[PermissionKeyEnum.write],
-    description: i18nT('user:permission_des.write')
+    value: 0b010
  },
  [PermissionKeyEnum.manage]: {
    ...PermissionList[PermissionKeyEnum.manage],
-    description: i18nT('user:permission_des.manage')
+    value: 0b001
  }
 };

-export const TeamDefaultPermissionVal = ReadPermissionVal;
+export const TeamReadPermissionVal = TeamPermissionList['read'].value;
+export const TeamWritePermissionVal = TeamPermissionList['write'].value;
+export const TeamManagePermissionVal = TeamPermissionList['manage'].value;
+export const TeamDefaultPermissionVal = TeamReadPermissionVal;
--- a/packages/global/support/permission/user/controller.ts
+++ b/packages/global/support/permission/user/controller.ts
@@ -1,5 +1,5 @@
 import { PerConstructPros, Permission } from '../controller';
-import { TeamDefaultPermissionVal } from './constant';
+import { TeamDefaultPermissionVal, TeamPermissionList } from './constant';

 export class TeamPermission extends Permission {
  constructor(props?: PerConstructPros) {
@@ -10,6 +10,7 @@ export class TeamPermission extends Permission {
    } else if (!props?.per) {
      props.per = TeamDefaultPermissionVal;
    }
+    props.permissionList = TeamPermissionList;
    super(props);
  }
 }
--- a/packages/global/support/user/team/controller.d.ts
+++ b/packages/global/support/user/team/controller.d.ts
@@ -33,7 +33,6 @@ export type UpdateTeamMemberProps = {
 export type InviteMemberProps = {
  teamId: string;
  usernames: string[];
-  permission: PermissionValueType;
 };
 export type UpdateInviteProps = {
  tmbId: string;
--- a/packages/global/support/user/team/group/api.d.ts
+++ b/packages/global/support/user/team/group/api.d.ts
@@ -0,0 +1,17 @@
+import { GroupMemberRole } from '../../../../support/permission/memberGroup/constant';
+
+export type postCreateGroupData = {
+  name: string;
+  avatar?: string;
+  memberIdList?: string[];
+};
+
+export type putUpdateGroupData = {
+  groupId: string;
+  name?: string;
+  avatar?: string;
+  memberList?: {
+    tmbId: string;
+    role: `${GroupMemberRole}`;
+  }[];
+};
--- a/packages/global/support/user/team/group/constant.ts
+++ b/packages/global/support/user/team/group/constant.ts
@@ -0,0 +1 @@
+export const DefaultGroupName = 'DEFAULT_GROUP';
--- a/packages/global/support/user/team/type.d.ts
+++ b/packages/global/support/user/team/type.d.ts
@@ -17,7 +17,6 @@ export type TeamSchema = {
    lastWebsiteSyncTime: Date;
  };
  lafAccount: LafAccountType;
-  defaultPermission: PermissionValueType;
  notificationAccount?: string;
 };

@@ -25,6 +24,7 @@ export type tagsType = {
  label: string;
  key: string;
 };
+
 export type TeamTagSchema = TeamTagItemType & {
  _id: string;
  teamId: string;
@@ -45,9 +45,11 @@ export type TeamMemberSchema = {
 export type TeamMemberWithUserSchema = Omit<TeamMemberSchema, 'userId'> & {
  userId: UserModelSchema;
 };
+
 export type TeamMemberWithTeamSchema = Omit<TeamMemberSchema, 'teamId'> & {
  teamId: TeamSchema;
 };
+
 export type TeamMemberWithTeamAndUserSchema = Omit<TeamMemberWithTeamSchema, 'userId'> & {
  userId: UserModelSchema;
 };
--- a/packages/service/support/permission/app/auth.ts
+++ b/packages/service/support/permission/app/auth.ts
@@ -86,7 +86,7 @@ export const authAppByTmbId = async ({
          resourceId: appId,
          resourceType: PerResourceTypeEnum.app
        });
-        const Per = new AppPermission({ per: rp?.permission ?? app.defaultPermission, isOwner });
+        const Per = new AppPermission({ per: rp ?? app.defaultPermission, isOwner });
        return {
          Per,
          defaultPermission: app.defaultPermission
--- a/packages/service/support/permission/controller.ts
+++ b/packages/service/support/permission/controller.ts
@@ -8,51 +8,113 @@ import { authOpenApiKey } from '../openapi/auth';
 import { FileTokenQuery } from '@fastgpt/global/common/file/type';
 import { MongoResourcePermission } from './schema';
 import { ClientSession } from 'mongoose';
-import { ParentIdType } from '@fastgpt/global/common/parentFolder/type';
-import { ResourcePermissionType } from '@fastgpt/global/support/permission/type';
+import {
+  PermissionValueType,
+  ResourcePermissionType
+} from '@fastgpt/global/support/permission/type';
 import { bucketNameMap } from '@fastgpt/global/common/file/constants';
 import { addMinutes } from 'date-fns';
+import { getGroupsByTmbId } from './memberGroup/controllers';
+import { Permission } from '@fastgpt/global/support/permission/controller';

+/** get resource permission for a team member
+ * If there is no permission for the team member, it will return undefined
+ * @param resourceType: PerResourceTypeEnum
+ * @param teamId
+ * @param tmbId
+ * @param resourceId
+ * @returns PermissionValueType | undefined
+ */
 export const getResourcePermission = async ({
  resourceType,
  teamId,
  tmbId,
  resourceId
 }: {
-  resourceType: PerResourceTypeEnum;
  teamId: string;
  tmbId: string;
-  resourceId?: string;
-}) => {
-  const per = await MongoResourcePermission.findOne({
-    tmbId,
-    teamId,
-    resourceType,
-    resourceId
-  });
+} & (
+  | {
+      resourceType: 'team';
+      resourceId?: undefined;
+    }
+  | {
+      resourceType: Omit<PerResourceTypeEnum, 'team'>;
+      resourceId: string;
+    }
+)): Promise<PermissionValueType | undefined> => {
+  // Personal permission has the highest priority
+  const tmbPer = (
+    await MongoResourcePermission.findOne(
+      {
+        tmbId,
+        teamId,
+        resourceType,
+        resourceId
+      },
+      'permission'
+    ).lean()
+  )?.permission;

-  if (!per) {
-    return null;
+  // could be 0
+  if (tmbPer !== undefined) {
+    return tmbPer;
  }
-  return per;
+
+  // If there is no personal permission, get the group permission
+  const groupIdList = (await getGroupsByTmbId({ tmbId, teamId })).map((item) => item._id);
+
+  if (groupIdList.length === 0) {
+    return undefined;
+  }
+
+  // get the maximum permission of the group
+  const pers = (
+    await MongoResourcePermission.find(
+      {
+        teamId,
+        resourceType,
+        groupId: {
+          $in: groupIdList
+        },
+        resourceId
+      },
+      'permission'
+    ).lean()
+  ).map((item) => item.permission);
+
+  const groupPer = getGroupPer(pers);
+
+  return groupPer;
 };
+
+/* 仅取 members 不取 groups */
 export async function getResourceAllClbs({
  resourceId,
  teamId,
  resourceType,
  session
 }: {
-  resourceId: ParentIdType;
  teamId: string;
-  resourceType: PerResourceTypeEnum;
  session?: ClientSession;
-}): Promise<ResourcePermissionType[]> {
-  if (!resourceId) return [];
+} & (
+  | {
+      resourceType: 'team';
+      resourceId?: undefined;
+    }
+  | {
+      resourceType: Omit<PerResourceTypeEnum, 'team'>;
+      resourceId?: string | null;
+    }
+)): Promise<ResourcePermissionType[]> {
  return MongoResourcePermission.find(
    {
      resourceId,
      resourceType: resourceType,
-      teamId: teamId
+      teamId: teamId,
+      groupId: {
+        $exists: false
+      }
    },
    null,
    {
@@ -60,6 +122,7 @@ export async function getResourceAllClbs({
    }
  ).lean();
 }
+
 export const delResourcePermissionById = (id: string) => {
  return MongoResourcePermission.findByIdAndRemove(id);
 };
@@ -301,3 +364,11 @@ export const authFileToken = (token?: string) =>
      });
    });
  });
+
+export const getGroupPer = (groups: PermissionValueType[] = []) => {
+  if (groups.length === 0) {
+    return undefined;
+  }
+
+  return new Permission().addPer(...groups).value;
+};
--- a/packages/service/support/permission/dataset/auth.ts
+++ b/packages/service/support/permission/dataset/auth.ts
@@ -78,7 +78,7 @@ export const authDatasetByTmbId = async ({
          resourceType: PerResourceTypeEnum.dataset
        });
        const Per = new DatasetPermission({
-          per: rp?.permission ?? dataset.defaultPermission,
+          per: rp ?? dataset.defaultPermission,
          isOwner
        });
        return {
--- a/packages/service/support/permission/inheritPermission.ts
+++ b/packages/service/support/permission/inheritPermission.ts
@@ -3,8 +3,9 @@ import { MongoResourcePermission } from './schema';
 import { ClientSession, Model } from 'mongoose';
 import { NullPermission, PerResourceTypeEnum } from '@fastgpt/global/support/permission/constant';
 import { PermissionValueType } from '@fastgpt/global/support/permission/type';
-import { ParentIdType } from '@fastgpt/global/common/parentFolder/type';
 import { getResourceAllClbs } from './controller';
+import { RequireOnlyOne } from '@fastgpt/global/common/type/utils';
+import { ParentIdType } from '@fastgpt/global/common/parentFolder/type';

 export type SyncChildrenPermissionResourceType = {
  _id: string;
@@ -14,8 +15,10 @@ export type SyncChildrenPermissionResourceType = {
 };
 export type UpdateCollaboratorItem = {
  permission: PermissionValueType;
+} & RequireOnlyOne<{
  tmbId: string;
-};
+  groupId: string;
+}>;

 // sync the permission to all children folders.
 export async function syncChildrenPermission({
--- a/packages/service/support/permission/memberGroup/controllers.ts
+++ b/packages/service/support/permission/memberGroup/controllers.ts
@@ -0,0 +1,183 @@
+import { MemberGroupSchemaType } from '@fastgpt/global/support/permission/memberGroup/type';
+import { MongoGroupMemberModel } from './groupMemberSchema';
+import { TeamMemberSchema } from '@fastgpt/global/support/user/team/type';
+import { PerResourceTypeEnum } from '@fastgpt/global/support/permission/constant';
+import { MongoResourcePermission } from '../schema';
+import { getGroupPer, parseHeaderCert } from '../controller';
+import { MongoMemberGroupModel } from './memberGroupSchema';
+import { DefaultGroupName } from '@fastgpt/global/support/user/team/group/constant';
+import { ClientSession } from 'mongoose';
+import { GroupMemberRole } from '@fastgpt/global/support/permission/memberGroup/constant';
+import { AuthModeType, AuthResponseType } from '../type';
+import { TeamErrEnum } from '@fastgpt/global/common/error/code/team';
+import { TeamPermission } from '@fastgpt/global/support/permission/user/controller';
+import { getTmbInfoByTmbId } from '../../user/team/controller';
+
+/**
+ * Get the default group of a team
+ * @param{Object} obj
+ * @param{string} obj.teamId
+ * @param{ClientSession} obj.session
+ */
+export const getTeamDefaultGroup = async ({
+  teamId,
+  session
+}: {
+  teamId: string;
+  session?: ClientSession;
+}) => {
+  const group = await MongoMemberGroupModel.findOne({ teamId, name: DefaultGroupName }, undefined, {
+    session
+  }).lean();
+
+  // Create the default group if it does not exist
+  if (!group) {
+    const [group] = await MongoMemberGroupModel.create(
+      [
+        {
+          teamId,
+          name: DefaultGroupName
+        }
+      ],
+      { session }
+    );
+
+    return group;
+  }
+  return group;
+};
+
+export const getGroupsByTmbId = async ({
+  tmbId,
+  teamId,
+  role
+}: {
+  tmbId: string;
+  teamId: string;
+  role?: `${GroupMemberRole}`[];
+}) =>
+  (
+    await Promise.all([
+      (
+        await MongoGroupMemberModel.find({
+          tmbId,
+          groupId: {
+            $exists: true
+          },
+          role: role ? { $in: role } : undefined
+        })
+          .populate('groupId')
+          .lean()
+      ).map((item) => {
+        return {
+          ...(item.groupId as any as MemberGroupSchemaType)
+        };
+      }),
+
+      role ? [] : getTeamDefaultGroup({ teamId })
+    ])
+  ).flat();
+
+export const getTmbByGroupId = async (groupId: string) => {
+  return (
+    await MongoGroupMemberModel.find({
+      groupId
+    })
+      .populate('tmbId')
+      .lean()
+  ).map((item) => {
+    return {
+      ...(item.tmbId as any as MemberGroupSchemaType)
+    };
+  });
+};
+
+export const getGroupMembersByGroupId = async (groupId: string) => {
+  return await MongoGroupMemberModel.find({
+    groupId
+  }).lean();
+};
+
+export const getGroupMembersWithInfoByGroupId = async (groupId: string) => {
+  return (
+    await MongoGroupMemberModel.find({
+      groupId
+    })
+      .populate('tmbId')
+      .lean()
+  ).map((item) => item.tmbId) as any as TeamMemberSchema[]; // HACK: type casting
+};
+
+/**
+ * Get tmb's group permission: the maximum permission of the group
+ * @param tmbId
+ * @param resourceId
+ * @param resourceType
+ * @returns the maximum permission of the group
+ */
+export const getGroupPermission = async ({
+  tmbId,
+  resourceId,
+  teamId,
+  resourceType
+}: {
+  tmbId: string;
+  teamId: string;
+} & (
+  | {
+      resourceId?: undefined;
+      resourceType: 'team';
+    }
+  | {
+      resourceId: string;
+      resourceType: Omit<PerResourceTypeEnum, 'team'>;
+    }
+)) => {
+  const groupIds = (await getGroupsByTmbId({ tmbId, teamId })).map((item) => item._id);
+  const groupPermissions = (
+    await MongoResourcePermission.find({
+      groupId: {
+        $in: groupIds
+      },
+      resourceType,
+      resourceId,
+      teamId
+    })
+  ).map((item) => item.permission);
+
+  return getGroupPer(groupPermissions);
+};
+
+// auth group member role
+export const authGroupMemberRole = async ({
+  groupId,
+  role,
+  ...props
+}: {
+  groupId: string;
+  role: `${GroupMemberRole}`[];
+} & AuthModeType): Promise<AuthResponseType> => {
+  const result = await parseHeaderCert(props);
+  const { teamId, tmbId, isRoot } = result;
+  if (isRoot) {
+    return {
+      ...result,
+      permission: new TeamPermission({
+        isOwner: true
+      }),
+      teamId,
+      tmbId
+    };
+  }
+  const groupMember = await MongoGroupMemberModel.findOne({ groupId, tmbId });
+  const tmb = await getTmbInfoByTmbId({ tmbId });
+  if (tmb.permission.hasManagePer || (groupMember && role.includes(groupMember.role))) {
+    return {
+      ...result,
+      permission: tmb.permission,
+      teamId,
+      tmbId
+    };
+  }
+  return Promise.reject(TeamErrEnum.unAuthTeam);
+};
--- a/packages/service/support/permission/memberGroup/groupMemberSchema.ts
+++ b/packages/service/support/permission/memberGroup/groupMemberSchema.ts
@@ -0,0 +1,44 @@
+import { TeamMemberCollectionName } from '@fastgpt/global/support/user/team/constant';
+import { connectionMongo, getMongoModel } from '../../../common/mongo';
+import { MemberGroupCollectionName } from './memberGroupSchema';
+import { GroupMemberSchemaType } from '@fastgpt/global/support/permission/memberGroup/type';
+import { GroupMemberRole } from '@fastgpt/global/support/permission/memberGroup/constant';
+const { Schema } = connectionMongo;
+
+export const GroupMemberCollectionName = 'team_group_members';
+
+export const GroupMemberSchema = new Schema({
+  groupId: {
+    type: Schema.Types.ObjectId,
+    ref: MemberGroupCollectionName,
+    required: true
+  },
+  tmbId: {
+    type: Schema.Types.ObjectId,
+    ref: TeamMemberCollectionName,
+    required: true
+  },
+  role: {
+    type: String,
+    enum: Object.values(GroupMemberRole),
+    required: true,
+    default: GroupMemberRole.member
+  }
+});
+
+try {
+  GroupMemberSchema.index({
+    groupId: 1
+  });
+
+  GroupMemberSchema.index({
+    tmbId: 1
+  });
+} catch (error) {
+  console.log(error);
+}
+
+export const MongoGroupMemberModel = getMongoModel<GroupMemberSchemaType>(
+  GroupMemberCollectionName,
+  GroupMemberSchema
+);
--- a/packages/service/support/permission/memberGroup/memberGroupSchema.ts
+++ b/packages/service/support/permission/memberGroup/memberGroupSchema.ts
@@ -0,0 +1,51 @@
+import { TeamCollectionName } from '@fastgpt/global/support/user/team/constant';
+import { connectionMongo, getMongoModel } from '../../../common/mongo';
+import { MemberGroupSchemaType } from '@fastgpt/global/support/permission/memberGroup/type';
+const { Schema } = connectionMongo;
+
+export const MemberGroupCollectionName = 'team_member_groups';
+
+export const MemberGroupSchema = new Schema(
+  {
+    teamId: {
+      type: Schema.Types.ObjectId,
+      ref: TeamCollectionName,
+      required: true
+    },
+    name: {
+      type: String,
+      required: true
+    },
+    avatar: {
+      type: String
+    },
+    updateTime: {
+      type: Date,
+      default: () => new Date()
+    }
+  },
+  {
+    timestamps: {
+      updatedAt: 'updateTime'
+    }
+  }
+);
+
+try {
+  MemberGroupSchema.index(
+    {
+      teamId: 1,
+      name: 1
+    },
+    {
+      unique: true
+    }
+  );
+} catch (error) {
+  console.log(error);
+}
+
+export const MongoMemberGroupModel = getMongoModel<MemberGroupSchemaType>(
+  MemberGroupCollectionName,
+  MemberGroupSchema
+);
--- a/packages/service/support/permission/schema.ts
+++ b/packages/service/support/permission/schema.ts
@@ -5,9 +5,10 @@ import {
 import { connectionMongo, getMongoModel } from '../../common/mongo';
 import type { ResourcePermissionType } from '@fastgpt/global/support/permission/type';
 import { PerResourceTypeEnum } from '@fastgpt/global/support/permission/constant';
+import { MemberGroupCollectionName } from './memberGroup/memberGroupSchema';
 const { Schema } = connectionMongo;

-export const ResourcePermissionCollectionName = 'resource_permission';
+export const ResourcePermissionCollectionName = 'resource_permissions';

 export const ResourcePermissionSchema = new Schema({
  teamId: {
@@ -18,6 +19,10 @@ export const ResourcePermissionSchema = new Schema({
    type: Schema.Types.ObjectId,
    ref: TeamMemberCollectionName
  },
+  groupId: {
+    type: Schema.Types.ObjectId,
+    ref: MemberGroupCollectionName
+  },
  resourceType: {
    type: String,
    enum: Object.values(PerResourceTypeEnum),
@@ -40,12 +45,14 @@ try {
      resourceType: 1,
      teamId: 1,
      tmbId: 1,
-      resourceId: 1
+      resourceId: 1,
+      groupId: 1
    },
    {
      unique: true
    }
  );
+
  ResourcePermissionSchema.index({
    resourceType: 1,
    teamId: 1,
--- a/packages/service/support/permission/type.d.ts
+++ b/packages/service/support/permission/type.d.ts
@@ -1,6 +1,7 @@
 import { Permission } from '@fastgpt/global/support/permission/controller';
 import { ApiRequestProps } from '../../type/next';
 import type { PermissionValueType } from '@fastgpt/global/support/permission/type';
+import { RequireAtLeastOne } from '@fastgpt/global/common/type/utils';

 export type ReqHeaderAuthType = {
  cookie?: string;
@@ -11,11 +12,6 @@ export type ReqHeaderAuthType = {
  authorization?: string;
 };

-type RequireAtLeastOne<T, Keys extends keyof T = keyof T> = Omit<T, Keys> &
-  {
-    [K in Keys]-?: Required<Pick<T, K>> & Partial<Omit<T, K>>;
-  }[Keys];
-
 type authModeType = {
  req: ApiRequestProps;
  authToken?: boolean;
--- a/packages/service/support/user/team/controller.ts
+++ b/packages/service/support/user/team/controller.ts
@@ -11,6 +11,10 @@ import { UpdateTeamProps } from '@fastgpt/global/support/user/team/controller';
 import { getResourcePermission } from '../../permission/controller';
 import { PerResourceTypeEnum } from '@fastgpt/global/support/permission/constant';
 import { TeamPermission } from '@fastgpt/global/support/permission/user/controller';
+import { TeamDefaultPermissionVal } from '@fastgpt/global/support/permission/user/constant';
+import { MongoMemberGroupModel } from '../../permission/memberGroup/memberGroupSchema';
+import { mongoSessionRun } from '../../../common/mongo/sessionRun';
+import { DefaultGroupName } from '@fastgpt/global/support/user/team/group/constant';

 async function getTeamMember(match: Record<string, any>): Promise<TeamTmbItemType> {
  const tmb = (await MongoTeamMember.findOne(match).populate('teamId')) as TeamMemberWithTeamSchema;
@@ -18,7 +22,7 @@ async function getTeamMember(match: Record<string, any>): Promise<TeamTmbItemTyp
    return Promise.reject('member not exist');
  }

-  const tmbPer = await getResourcePermission({
+  const Per = await getResourcePermission({
    resourceType: PerResourceTypeEnum.team,
    teamId: tmb.teamId._id,
    tmbId: tmb._id
@@ -38,7 +42,7 @@ async function getTeamMember(match: Record<string, any>): Promise<TeamTmbItemTyp
    defaultTeam: tmb.defaultTeam,
    lafAccount: tmb.teamId.lafAccount,
    permission: new TeamPermission({
-      per: tmbPer?.permission ?? tmb.teamId.defaultPermission,
+      per: Per ?? TeamDefaultPermissionVal,
      isOwner: tmb.role === TeamMemberRoleEnum.owner
    }),
    notificationAccount: tmb.teamId.notificationAccount
@@ -64,6 +68,7 @@ export async function getUserDefaultTeam({ userId }: { userId: string }) {
    defaultTeam: true
  });
 }
+
 export async function createDefaultTeam({
  userId,
  teamName = 'My Team',
@@ -84,7 +89,7 @@ export async function createDefaultTeam({
  });

  if (!tmb) {
-    // create
+    // create team
    const [{ _id: insertedId }] = await MongoTeam.create(
      [
        {
@@ -97,7 +102,8 @@ export async function createDefaultTeam({
      ],
      { session }
    );
-    await MongoTeamMember.create(
+    // create team member
+    const [tmb] = await MongoTeamMember.create(
      [
        {
          teamId: insertedId,
@@ -111,7 +117,19 @@ export async function createDefaultTeam({
      ],
      { session }
    );
-    console.log('create default team', userId);
+    // create default group
+    await MongoMemberGroupModel.create(
+      [
+        {
+          teamId: tmb.teamId,
+          name: DefaultGroupName,
+          avatar
+        }
+      ],
+      { session }
+    );
+    console.log('create default team and group', userId);
+    return tmb;
  } else {
    console.log('default team exist', userId);
    await MongoTeam.findByIdAndUpdate(tmb.teamId, {
@@ -129,10 +147,30 @@ export async function updateTeam({
  teamDomain,
  lafAccount
 }: UpdateTeamProps & { teamId: string }) {
-  await MongoTeam.findByIdAndUpdate(teamId, {
-    name,
-    avatar,
-    teamDomain,
-    lafAccount
+  return mongoSessionRun(async (session) => {
+    await MongoTeam.findByIdAndUpdate(
+      teamId,
+      {
+        name,
+        avatar,
+        teamDomain,
+        lafAccount
+      },
+      { session }
+    );
+
+    // update default group
+    if (avatar) {
+      await MongoMemberGroupModel.updateOne(
+        {
+          teamId: teamId,
+          name: DefaultGroupName
+        },
+        {
+          avatar
+        },
+        { session }
+      );
+    }
  });
 }
--- a/packages/service/support/user/team/teamSchema.ts
+++ b/packages/service/support/user/team/teamSchema.ts
@@ -3,7 +3,6 @@ const { Schema } = connectionMongo;
 import { TeamSchema as TeamType } from '@fastgpt/global/support/user/team/type.d';
 import { userCollectionName } from '../../user/schema';
 import { TeamCollectionName } from '@fastgpt/global/support/user/team/constant';
-import { TeamDefaultPermissionVal } from '@fastgpt/global/support/permission/user/constant';

 const TeamSchema = new Schema({
  name: {
@@ -14,10 +13,6 @@ const TeamSchema = new Schema({
    type: Schema.Types.ObjectId,
    ref: userCollectionName
  },
-  defaultPermission: {
-    type: Number,
-    default: TeamDefaultPermissionVal
-  },
  avatar: {
    type: String,
    default: '/icon/logo.svg'
--- a/packages/web/components/common/Avatar/AvatarGroup.tsx
+++ b/packages/web/components/common/Avatar/AvatarGroup.tsx
@@ -0,0 +1,55 @@
+import React from 'react';
+import Avatar from '.';
+import { Box, Flex } from '@chakra-ui/react';
+
+/**
+ * AvatarGroup
+ *
+ * @param avatars - avatars array
+ * @param max - max avatars to show
+ * @param [groupId] - group id to make the key unique
+ * @returns
+ */
+function AvatarGroup({
+  avatars,
+  max = 3,
+  groupId
+}: {
+  max?: number;
+  avatars: string[];
+  groupId?: string;
+}) {
+  return (
+    <Flex position="relative">
+      {avatars.slice(0, max).map((avatar, index) => (
+        <Avatar
+          key={avatar + groupId}
+          src={avatar}
+          position={index > 0 ? 'absolute' : 'relative'}
+          left={index > 0 ? `${index * 15}px` : 0}
+          zIndex={index > 0 ? index + 1 : 0}
+          w={'24px'}
+          borderRadius={'50%'}
+        />
+      ))}
+      {avatars.length > max && (
+        <Box
+          position="relative"
+          left={`${(max - 1) * 15}px`}
+          w={'24px'}
+          h={'24px'}
+          borderRadius="50%"
+          display="flex"
+          alignItems="center"
+          justifyContent="center"
+          fontSize="sm"
+          color="myGray.500"
+        >
+          +{avatars.length - max}
+        </Box>
+      )}
+    </Flex>
+  );
+}
+
+export default AvatarGroup;
--- a/packages/web/components/common/Icon/constants.ts
+++ b/packages/web/components/common/Icon/constants.ts
@@ -342,6 +342,7 @@ export const iconPaths = {
  'support/permission/collaborator': () => import('./icons/support/permission/collaborator.svg'),
  'support/permission/privateLight': () => import('./icons/support/permission/privateLight.svg'),
  'support/permission/publicLight': () => import('./icons/support/permission/publicLight.svg'),
+  'support/team/group': () => import('./icons/support/team/group.svg'),
  'support/team/key': () => import('./icons/support/team/key.svg'),
  'support/team/memberLight': () => import('./icons/support/team/memberLight.svg'),
  'support/usage/usageRecordLight': () => import('./icons/support/usage/usageRecordLight.svg'),
--- a/packages/web/components/common/Icon/icons/common/inviteLight.svg
+++ b/packages/web/components/common/Icon/icons/common/inviteLight.svg
@@ -1,11 +1,5 @@
-<?xml version="1.0" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg t="1698673802976"
-    class="icon" viewBox="0 0 1024 1024" version="1.1" xmlns="http://www.w3.org/2000/svg" p-id="2726"
-    xmlns:xlink="http://www.w3.org/1999/xlink" width="128" height="128">
-    <path
-        d="M496.68187246 465.60374835c121.95586149 0 220.9345317-98.9786702 220.9345317-220.9345317s-98.9786702-220.9345317-220.9345317-220.93453167-220.9345317 98.9786702-220.93453167 220.93453167 98.9786702 220.9345317 220.93453167 220.9345317z m-125.04894492-345.98347662c33.43475913-33.28746944 77.76895517-51.69868042 125.04894492-51.69868042 47.27998978 0 91.61418581 18.41121097 125.04894495 51.69868042 33.43475913 33.43475913 51.69868042 77.76895517 51.69868041 125.04894492 0 47.27998978-18.41121097 91.61418581-51.69868041 125.04894495-33.43475913 33.43475913-77.76895517 51.69868042-125.04894495 51.69868042-47.27998978 0-91.61418581-18.41121097-125.04894492-51.69868042-33.43475913-33.43475913-51.69868042-77.76895517-51.69868041-125.04894495 0-47.27998978 18.41121097-91.61418581 51.69868041-125.04894492zM511.41084125 892.59655326h-213.5700473c-81.15661796 0-147.2896878-66.13306981-147.28968778-147.2896878 0-39.32634663 15.31812754-76.29605827 43.1558785-104.13380927 27.83775099-27.83775099 64.80746262-43.15587853 104.13380928-43.15587853h397.68215704c52.14054948 0 100.89343614 27.98504069 127.25829025 73.05568516 6.1861669 10.60485751 19.73681815 14.13981003 30.19438599 7.95364313 10.60485751-6.1861669 14.13981003-19.73681815 7.95364314-30.19438599-34.31849726-58.47400606-97.65306301-94.85455893-165.40631938-94.85455893h-397.68215704c-51.10952167 0-99.12595989 19.88410785-135.35922308 56.11737104-36.2332632 36.0859735-56.11737105 84.24970142-56.11737105 135.35922308 0 105.60670615 85.86988799 191.47659413 191.47659413 191.47659413h213.5700473c12.22504409 0 22.09345317-10.01569877 22.09345316-22.24074285s-9.86840908-22.09345317-22.09345316-22.09345317z"
-        p-id="2727"></path>
-    <path
-        d="M873.74347321 830.88217408h-103.10278144v-103.10278145c0-12.22504409-9.86840908-22.09345317-22.09345318-22.09345318s-22.09345317 9.86840908-22.09345316 22.09345318v103.10278145h-103.10278146c-12.22504409 0-22.09345317 9.86840908-22.09345318 22.09345315s9.86840908 22.09345317 22.09345318 22.09345318h103.10278146v103.10278146c0 12.22504409 9.86840908 22.09345317 22.09345316 22.09345315s22.09345317-9.86840908 22.09345318-22.09345315v-103.10278146h103.10278144c12.22504409 0 22.09345317-9.86840908 22.09345318-22.09345318s-9.86840908-22.09345317-22.09345318-22.09345315z"
-        p-id="2728"></path>
-</svg>
+<svg viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M11.2292 4.81275C11.2292 6.59622 9.78346 8.04201 7.99999 8.04201C6.21652 8.04201 4.77073 6.59622 4.77073 4.81275C4.77073 3.02928 6.21652 1.5835 7.99999 1.5835C9.78346 1.5835 11.2292 3.02928 11.2292 4.81275ZM9.89591 4.81275C9.89591 5.85984 9.04708 6.70868 7.99999 6.70868C6.9529 6.70868 6.10406 5.85984 6.10406 4.81275C6.10406 3.76566 6.9529 2.91683 7.99999 2.91683C9.04708 2.91683 9.89591 3.76566 9.89591 4.81275Z" fill=""/>
+  <path d="M2.40472 13.2218C2.40472 11.0126 4.19559 9.22177 6.40472 9.22177H8.84072C9.20891 9.22177 9.50738 9.52025 9.50738 9.88844C9.50738 10.2566 9.20891 10.5551 8.84072 10.5551H6.40472C5.01236 10.5551 3.86924 11.6222 3.74858 12.9832H8.84072C9.20891 12.9832 9.50738 13.2817 9.50738 13.6499C9.50738 14.0181 9.20891 14.3165 8.84072 14.3165H3.13806C2.73305 14.3165 2.40472 13.9882 2.40472 13.5832V13.2218Z"/>
+  <path d="M13.1385 9.91359C13.1385 9.5454 12.84 9.24693 12.4718 9.24693C12.1036 9.24693 11.8052 9.54541 11.8052 9.91359V11.165H10.5537C10.1855 11.165 9.88702 11.4635 9.88702 11.8317C9.88702 12.1999 10.1855 12.4984 10.5537 12.4984H11.8052V13.7498C11.8052 14.118 12.1036 14.4165 12.4718 14.4165C12.84 14.4165 13.1385 14.118 13.1385 13.7498V12.4984H14.3899C14.7581 12.4984 15.0566 12.1999 15.0566 11.8317C15.0566 11.4635 14.7581 11.165 14.3899 11.165H13.1385V9.91359Z"/>
+</svg>
--- a/packages/web/components/common/Icon/icons/core/dataset/tag.svg
+++ b/packages/web/components/common/Icon/icons/core/dataset/tag.svg
@@ -1,4 +1,4 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 20 20" fill="none">
-  <path d="M6.99509 8.73514C7.91556 8.73514 8.66175 7.98895 8.66175 7.06848C8.66175 6.148 7.91556 5.40181 6.99509 5.40181C6.07461 5.40181 5.32842 6.148 5.32842 7.06848C5.32842 7.98895 6.07461 8.73514 6.99509 8.73514Z" fill="#3370FF"/>
-  <path fill-rule="evenodd" clip-rule="evenodd" d="M3.99565 1.36786C2.54416 1.36786 1.36749 2.54452 1.36749 3.99602V8.73989C1.36749 8.78421 1.36927 8.82834 1.37282 8.87218C1.40208 9.61777 1.70199 10.357 2.27163 10.9267L9.07586 17.7309C10.2775 18.9325 12.2256 18.9325 13.4272 17.7309L17.7314 13.4268C18.933 12.2252 18.933 10.277 17.7314 9.07542L10.9271 2.27119C10.3517 1.69578 9.60329 1.39563 8.85009 1.37157C8.8134 1.3691 8.77653 1.36786 8.73952 1.36786H3.99565ZM3.03416 3.99602C3.03416 3.465 3.46463 3.03453 3.99565 3.03453H8.73865L8.7619 3.03649L8.78665 3.0371C9.13683 3.04575 9.48192 3.183 9.74862 3.4497L16.5528 10.2539C17.1036 10.8046 17.1036 11.6975 16.5528 12.2483L12.2487 16.5524C11.698 17.1031 10.8051 17.1031 10.2544 16.5524L3.45015 9.74818C3.1856 9.48364 3.04846 9.14202 3.03778 8.79481L3.03689 8.76573L3.03416 8.73871V3.99602Z" fill="#3370FF"/>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20" fill="none">
+  <path d="M6.99509 8.73514C7.91556 8.73514 8.66175 7.98895 8.66175 7.06848C8.66175 6.148 7.91556 5.40181 6.99509 5.40181C6.07461 5.40181 5.32842 6.148 5.32842 7.06848C5.32842 7.98895 6.07461 8.73514 6.99509 8.73514Z" />
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M3.99565 1.36786C2.54416 1.36786 1.36749 2.54452 1.36749 3.99602V8.73989C1.36749 8.78421 1.36927 8.82834 1.37282 8.87218C1.40208 9.61777 1.70199 10.357 2.27163 10.9267L9.07586 17.7309C10.2775 18.9325 12.2256 18.9325 13.4272 17.7309L17.7314 13.4268C18.933 12.2252 18.933 10.277 17.7314 9.07542L10.9271 2.27119C10.3517 1.69578 9.60329 1.39563 8.85009 1.37157C8.8134 1.3691 8.77653 1.36786 8.73952 1.36786H3.99565ZM3.03416 3.99602C3.03416 3.465 3.46463 3.03453 3.99565 3.03453H8.73865L8.7619 3.03649L8.78665 3.0371C9.13683 3.04575 9.48192 3.183 9.74862 3.4497L16.5528 10.2539C17.1036 10.8046 17.1036 11.6975 16.5528 12.2483L12.2487 16.5524C11.698 17.1031 10.8051 17.1031 10.2544 16.5524L3.45015 9.74818C3.1856 9.48364 3.04846 9.14202 3.03778 8.79481L3.03689 8.76573L3.03416 8.73871V3.99602Z"/>
+</svg>
--- a/packages/web/components/common/Icon/icons/modal/changePer.svg
+++ b/packages/web/components/common/Icon/icons/modal/changePer.svg
@@ -1,4 +1,4 @@
 <svg xmlns="http://www.w3.org/2000/svg"  viewBox="0 0 20 20" fill="none">
-  <path d="M13.6688 3.97738C13.9942 3.65195 14.5219 3.65195 14.8473 3.97738L18.1446 7.27471C18.1531 7.28305 18.1613 7.29157 18.1693 7.30026C18.2353 7.37136 18.2865 7.45116 18.3231 7.53579C18.3669 7.63717 18.3912 7.74898 18.3912 7.86647C18.3912 7.98306 18.3673 8.09406 18.3241 8.19481C18.2868 8.28189 18.234 8.3639 18.1656 8.43664C18.1537 8.44941 18.1413 8.46179 18.1285 8.47378C18.0538 8.54406 17.9693 8.59796 17.8796 8.63546C17.7843 8.67534 17.6801 8.69805 17.5708 8.69971L17.5565 8.6998L5.39124 8.6998C4.931 8.6998 4.55791 8.32671 4.55791 7.86647C4.55791 7.40623 4.931 7.03314 5.39124 7.03314L15.5461 7.03314L13.6688 5.1559C13.3434 4.83046 13.3434 4.30282 13.6688 3.97738Z" fill="#3370FF"/>
-  <path d="M1.96866 11.5443C2.04865 11.4643 2.14086 11.404 2.23928 11.3633C2.33521 11.3236 2.44016 11.3012 2.55022 11.3002L2.55791 11.3002H14.7246C15.1848 11.3002 15.5579 11.6733 15.5579 12.1335C15.5579 12.5938 15.1848 12.9669 14.7246 12.9669H4.56976L6.447 14.8441C6.77244 15.1696 6.77244 15.6972 6.447 16.0226C6.12156 16.3481 5.59392 16.3481 5.26849 16.0226L1.96953 12.7237L1.96146 12.7155C1.88513 12.6373 1.82725 12.5478 1.78781 12.4525C1.74707 12.3543 1.72458 12.2465 1.72458 12.1335C1.72458 12.0207 1.74701 11.9131 1.78767 11.8149C1.82833 11.7165 1.88866 11.6243 1.96866 11.5443Z" fill="#3370FF"/>
-</svg>
+  <path d="M13.6688 3.97738C13.9942 3.65195 14.5219 3.65195 14.8473 3.97738L18.1446 7.27471C18.1531 7.28305 18.1613 7.29157 18.1693 7.30026C18.2353 7.37136 18.2865 7.45116 18.3231 7.53579C18.3669 7.63717 18.3912 7.74898 18.3912 7.86647C18.3912 7.98306 18.3673 8.09406 18.3241 8.19481C18.2868 8.28189 18.234 8.3639 18.1656 8.43664C18.1537 8.44941 18.1413 8.46179 18.1285 8.47378C18.0538 8.54406 17.9693 8.59796 17.8796 8.63546C17.7843 8.67534 17.6801 8.69805 17.5708 8.69971L17.5565 8.6998L5.39124 8.6998C4.931 8.6998 4.55791 8.32671 4.55791 7.86647C4.55791 7.40623 4.931 7.03314 5.39124 7.03314L15.5461 7.03314L13.6688 5.1559C13.3434 4.83046 13.3434 4.30282 13.6688 3.97738Z"/>
+  <path d="M1.96866 11.5443C2.04865 11.4643 2.14086 11.404 2.23928 11.3633C2.33521 11.3236 2.44016 11.3012 2.55022 11.3002L2.55791 11.3002H14.7246C15.1848 11.3002 15.5579 11.6733 15.5579 12.1335C15.5579 12.5938 15.1848 12.9669 14.7246 12.9669H4.56976L6.447 14.8441C6.77244 15.1696 6.77244 15.6972 6.447 16.0226C6.12156 16.3481 5.59392 16.3481 5.26849 16.0226L1.96953 12.7237L1.96146 12.7155C1.88513 12.6373 1.82725 12.5478 1.78781 12.4525C1.74707 12.3543 1.72458 12.2465 1.72458 12.1335C1.72458 12.0207 1.74701 11.9131 1.78767 11.8149C1.82833 11.7165 1.88866 11.6243 1.96866 11.5443Z"/>
+</svg>
--- a/packages/web/components/common/Icon/icons/support/team/group.svg
+++ b/packages/web/components/common/Icon/icons/support/team/group.svg
@@ -0,0 +1,3 @@
+<svg viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M6.4119 2.94954C5.37676 2.94954 4.53761 3.78869 4.53761 4.82383C4.53761 5.85898 5.37676 6.69812 6.4119 6.69812C7.44704 6.69812 8.28619 5.85898 8.28619 4.82383C8.28619 3.78869 7.44704 2.94954 6.4119 2.94954ZM3.20428 4.82383C3.20428 3.05231 4.64038 1.61621 6.4119 1.61621C8.18342 1.61621 9.61952 3.05231 9.61952 4.82383C9.61952 6.59536 8.18342 8.03146 6.4119 8.03146C4.64038 8.03146 3.20428 6.59536 3.20428 4.82383ZM9.60538 2.21744C9.74353 1.87615 10.1322 1.71147 10.4735 1.84962C11.6478 2.32496 12.4781 3.47663 12.4781 4.82383C12.4781 6.17103 11.6478 7.3227 10.4735 7.79805C10.1322 7.9362 9.74353 7.77152 9.60538 7.43023C9.46723 7.08894 9.6319 6.70028 9.97319 6.56213C10.6613 6.28359 11.1448 5.60937 11.1448 4.82383C11.1448 4.0383 10.6613 3.36408 9.97319 3.08554C9.6319 2.94739 9.46723 2.55872 9.60538 2.21744ZM5.43553 9.23908H7.38828C7.96028 9.23908 8.42329 9.23907 8.80044 9.2648C9.18874 9.2913 9.5345 9.34728 9.86274 9.48325C10.6487 9.8088 11.2731 10.4332 11.5987 11.2192C11.7347 11.5474 11.7906 11.8932 11.8171 12.2815C11.8429 12.6586 11.8429 13.1216 11.8429 13.6936V13.7172C11.8429 14.0854 11.5444 14.3839 11.1762 14.3839C10.808 14.3839 10.5095 14.0854 10.5095 13.7172C10.5095 13.1161 10.5092 12.6987 10.4869 12.3723C10.465 12.0519 10.4243 11.8682 10.3669 11.7294C10.1766 11.2702 9.81175 10.9053 9.3525 10.7151C9.21379 10.6576 9.03009 10.6169 8.70968 10.595C8.38328 10.5728 7.96585 10.5724 7.36476 10.5724H5.45904C4.85795 10.5724 4.44052 10.5728 4.11413 10.595C3.79372 10.6169 3.61001 10.6576 3.47131 10.7151C3.01205 10.9053 2.64718 11.2702 2.45695 11.7294C2.39949 11.8682 2.35877 12.0519 2.33691 12.3723C2.31464 12.6987 2.31428 13.1161 2.31428 13.7172C2.31428 14.0854 2.0158 14.3839 1.64761 14.3839C1.27942 14.3839 0.980942 14.0854 0.980942 13.7172L0.980942 13.6936C0.980937 13.1216 0.980933 12.6587 1.00667 12.2815C1.03316 11.8932 1.08914 11.5474 1.22511 11.2192C1.55066 10.4332 2.1751 9.8088 2.96106 9.48325C3.28931 9.34728 3.63507 9.2913 4.02336 9.2648C4.40052 9.23907 4.86352 9.23908 5.43553 9.23908ZM11.8011 9.81963C11.8928 9.46306 12.2563 9.2484 12.6128 9.34018C13.9962 9.69622 15.0191 10.9512 15.0191 12.4467V13.7172C15.0191 14.0854 14.7206 14.3839 14.3524 14.3839C13.9842 14.3839 13.6857 14.0854 13.6857 13.7172V12.4467C13.6857 11.5743 13.089 10.8395 12.2805 10.6314C11.9239 10.5396 11.7093 10.1762 11.8011 9.81963Z"/>
+</svg>
--- a/packages/web/components/common/Input/SearchInput/index.tsx
+++ b/packages/web/components/common/Input/SearchInput/index.tsx
@@ -1,13 +1,15 @@
 import React from 'react';
-import { InputGroup, Input, InputProps, Flex } from '@chakra-ui/react';
+import { Input, InputProps, InputGroup, InputLeftElement } from '@chakra-ui/react';
 import MyIcon from '../../Icon';

 const SearchInput = (props: InputProps) => {
  return (
-    <Flex alignItems={'center'} position={'relative'}>
-      <Input {...props} />
-      <MyIcon name={'common/searchLight'} w={'1rem'} position={'absolute'} left={2} zIndex={10} />
-    </Flex>
+    <InputGroup alignItems="center" size={'sm'}>
+      <InputLeftElement>
+        <MyIcon name="common/searchLight" w="16px" color={'myGray.500'} />
+      </InputLeftElement>
+      <Input fontSize="sm" bg={'myGray.50'} {...props} />
+    </InputGroup>
  );
 };

--- a/packages/web/components/common/MyMenu/index.tsx
+++ b/packages/web/components/common/MyMenu/index.tsx
@@ -143,10 +143,21 @@ const MyMenu = ({
            bottom={0}
            left={0}
          />
-          <Box position={'relative'}>{Button}</Box>
+          <Box
+            position={'relative'}
+            color={isOpen ? 'primary.600' : ''}
+            w="fit-content"
+            p="1"
+            bgColor={isOpen ? 'myGray.50' : ''}
+            h="fit-content"
+            borderRadius="sm"
+          >
+            {Button}
+          </Box>
        </Box>
        <MenuList
          minW={isOpen ? `${width}px !important` : '80px'}
+          zIndex={100}
          maxW={'300px'}
          p={'6px'}
          border={'1px solid #fff'}
--- a/packages/web/components/common/MyModal/index.tsx
+++ b/packages/web/components/common/MyModal/index.tsx
@@ -6,7 +6,8 @@ import {
  ModalHeader,
  ModalCloseButton,
  ModalContentProps,
-  Box
+  Box,
+  ImageProps
 } from '@chakra-ui/react';
 import MyBox from '../MyBox';
 import { useSystem } from '../../../hooks/useSystem';
@@ -14,7 +15,7 @@ import Avatar from '../Avatar';

 export interface MyModalProps extends ModalContentProps {
  iconSrc?: string;
-  iconColor?: string;
+  iconColor?: ImageProps['color'];
  title?: any;
  isCentered?: boolean;
  isLoading?: boolean;
@@ -81,7 +82,7 @@ const MyModal = ({
                  alt=""
                  src={iconSrc}
                  w={'1.5rem'}
-                  borderRadius={'md'}
+                  borderRadius={'sm'}
                />
              </>
            )}
--- a/packages/web/components/common/Tabs/LightRowTabs.tsx
+++ b/packages/web/components/common/Tabs/LightRowTabs.tsx
@@ -67,8 +67,11 @@ const LightRowTabs = <ValueType = string,>({
            justifyContent={'center'}
            borderBottom={'2px solid'}
            borderColor={defaultColor}
-            px={3}
+            px={1}
            whiteSpace={'nowrap'}
+            _hover={{
+              color: activeColor
+            }}
            {...(value === item.value
              ? {
                  color: activeColor,
--- a/packages/web/i18n/en/app.json
+++ b/packages/web/i18n/en/app.json
@@ -159,4 +159,4 @@
  "workflow.user_file_input_desc": "Links to documents and images uploaded by users.",
  "workflow.user_select": "User Selection",
  "workflow.user_select_tip": "This module can configure multiple options for selection during the dialogue. Different options can lead to different workflow branches."
-}
+}
--- a/packages/web/i18n/en/common.json
+++ b/packages/web/i18n/en/common.json
@@ -1197,4 +1197,4 @@
  "verification": "Verification",
  "xx_search_result": "{{key}} Search Results",
  "yes": "Yes"
-}
+}
--- a/packages/web/i18n/en/login.json
+++ b/packages/web/i18n/en/login.json
@@ -13,4 +13,4 @@
  "root_password_placeholder": "The root user password is the value of the environment variable DEFAULT_ROOT_PSW",
  "terms": "Terms",
  "use_root_login": "Log in as root user"
-}
+}
--- a/packages/web/i18n/en/user.json
+++ b/packages/web/i18n/en/user.json
@@ -78,6 +78,7 @@
  "team.add_collaborator": "Add Collaborator",
  "team.manage_collaborators": "Manage Collaborators",
  "team.no_collaborators": "No Collaborators",
+  "team.write_role_member": "",
  "usage.feishu": "Feishu",
  "usage.official_account": "Official Account",
  "usage.share": "Share Link",
--- a/packages/web/i18n/en/workflow.json
+++ b/packages/web/i18n/en/workflow.json
@@ -186,4 +186,4 @@
  "workflow.Switch_success": "Switch Successful",
  "workflow.Team cloud": "Team Cloud",
  "workflow.exit_tips": "Your changes have not been saved. 'Exit directly' will not save your edits."
-}
+}
--- a/packages/web/i18n/zh/app.json
+++ b/packages/web/i18n/zh/app.json
@@ -159,4 +159,4 @@
  "workflow.user_file_input_desc": "用户上传的文档和图片链接",
  "workflow.user_select": "用户选择",
  "workflow.user_select_tip": "该模块可配置多个选项，以供对话时选择。不同选项可导向不同工作流支线"
-}
+}
--- a/packages/web/i18n/zh/common.json
+++ b/packages/web/i18n/zh/common.json
@@ -65,7 +65,7 @@
  "code_error.outlink_error.un_auth_user": "身份校验失败",
  "code_error.plugin_error.not_exist": "插件不存在",
  "code_error.plugin_error.un_auth": "无权操作该插件",
-  "code_error.system_error.community_version_num_limit": "超出开源版数量限制，请升级商业版: https://tryfastgpt.ai",
+  "code_error.system_error.community_version_num_limit": "超出开源版数量限制，请升级商业版: https://fastgpt.in",
  "code_error.team_error.ai_points_not_enough": "",
  "code_error.team_error.app_amount_not_enough": "应用数量已达上限~",
  "code_error.team_error.dataset_amount_not_enough": "知识库数量已达上限~",
@@ -75,6 +75,8 @@
  "code_error.team_error.re_rank_not_enough": "无权使用检索重排~",
  "code_error.team_error.un_auth": "无权操作该团队",
  "code_error.team_error.website_sync_not_enough": "无权使用Web站点同步~",
+  "code_error.team_error.group_name_duplicate": "群组名称重复",
+  "code_error.team_error.user_not_active": "用户未接受或已离开团队",
  "code_error.token_error_code.403": "登录状态无效，请重新登录",
  "code_error.user_error.balance_not_enough": "账号余额不足~",
  "code_error.user_error.bin_visitor": "您的身份校验未通过",
@@ -226,7 +228,7 @@
  "common.submit_success": "提交成功",
  "common.submitted": "已提交",
  "common.support": "支持",
-  "common.system.Commercial version function": "请升级商业版后使用该功能：https://tryfastgpt.ai",
+  "common.system.Commercial version function": "请升级商业版后使用该功能：https://fastgpt.in",
  "common.system.Help Chatbot": "机器人助手",
  "common.system.Use Helper": "使用帮助",
  "common.ui.textarea.Magnifying": "放大",
@@ -240,6 +242,10 @@
  "comon.Continue_Adding": "继续添加",
  "compliance.chat": "内容由第三方 AI 生成，无法确保真实准确，仅供参考",
  "compliance.dataset": "请确保您的内容严格遵守相关法律法规，避免包含任何违法或侵权的内容。请谨慎上传可能涉及敏感信息的资料。",
+  "code_error.team_error.group_name_empty": "群组名称不能为空",
+  "code_error.team_error.group_not_exist": "群组不存在",
+  "code_error.team_error.cannot_delete_default_group": "不能删除默认群组",
+  "common.Permission_tip": "个人权限大于群组权限",
  "confirm_choice": "确认选择",
  "contribute_app_template": "贡献模板",
  "core.Chat": "对话",
@@ -1193,6 +1199,8 @@
  "user.team.role.Admin": "管理员",
  "user.team.role.Owner": "创建者",
  "user.type": "类型",
+  "user.team.role.writer": "可写成员",
+  "user.team.role.Visitor": "访客",
  "verification": "验证",
  "xx_search_result": "{{key}} 的搜索结果",
  "yes": "是"
--- a/packages/web/i18n/zh/login.json
+++ b/packages/web/i18n/zh/login.json
@@ -13,4 +13,4 @@
  "redirect": "跳转",
  "no_remind": "不再提醒",
  "Chinese_ip_tip": "检测到您是中国大陆 IP，点击跳转访问中国大陆版。"
-}
+}
--- a/packages/web/i18n/zh/user.json
+++ b/packages/web/i18n/zh/user.json
@@ -22,6 +22,8 @@
  "bind_inform_account_success": "绑定通知账号成功",
  "delete.admin_failed": "删除管理员失败",
  "delete.admin_success": "删除管理员成功",
+  "delete.failed": "删除失败",
+  "delete.success": "删除成功",
  "has_chosen": "已选择",
  "individuation": "个性化",
  "login.error": "登录异常",
@@ -76,11 +78,39 @@
  "synchronization.title": "填写标签同步链接，点击同步按钮即可同步",
  "team.Add manager": "添加管理员",
  "team.add_collaborator": "添加协作者",
+  "team.add_writer": "添加可写成员",
+  "team.avatar_and_name": "头像 & 名称",
+  "team.group.avatar": "群头像",
+  "team.group.create": "创建群组",
+  "team.group.create_failed": "创建群组失败",
+  "team.group.default_group": "默认群组",
+  "team.group.delete_confirm": "确认删除群组？",
+  "team.group.edit": "编辑群组",
+  "team.group.edit_info": "编辑信息",
+  "team.group.manage_member": "管理成员",
+  "team.group.transfer_owner": "转让所有者",
+  "team.group.group": "群组",
+  "team.group.members": "成员",
+  "team.group.name": "群组名称",
+  "team.group.role.admin": "管理员",
+  "team.group.role.member": "成员",
+  "team.group.role.owner": "所有者",
+  "team.group.toast.can_not_delete_owner": "不能删除所有者, 请先转让",
+  "team.group.set_as_admin": "设为管理员",
+  "team.group.keep_admin": "保留管理员权限",
+  "team.group.permission_tip": "单独配置权限的成员，将遵循个人权限配置，不再受群组权限影响。\n若成员在多个权限组，则该成员的权限取并集。",
+  "team.group.permission.write": "工作台/知识库创建",
+  "team.group.permission.manage": "管理员",
+  "team.group.manage_tip": "可以邀请成员、删除成员、创建群组、管理所有群组、为群组和成员分配权限",
+  "team.group.search_placeholder": "搜索成员/群组名称",
  "team.manage_collaborators": "管理协作者",
  "team.no_collaborators": "暂无协作者",
+  "team.belong_to_group": "所属成员组",
+  "team.write_role_member": "可写权限",
  "usage.feishu": "飞书",
  "usage.official_account": "公众号",
  "usage.share": "分享链接",
  "usage.wecom": "企业微信",
-  "usage_record": "使用记录"
+  "usage_record": "使用记录",
+  "owner": "所有者"
 }
--- a/packages/web/i18n/zh/workflow.json
+++ b/packages/web/i18n/zh/workflow.json
@@ -187,4 +187,4 @@
  "workflow.Switch_success": "切换成功",
  "workflow.Team cloud": "团队云端",
  "workflow.exit_tips": "您的更改尚未保存，「直接退出」将不会保存您的编辑记录。"
-}
+}
				`@@ -0,0 +1 @@`
				`export const DefaultGroupName = 'DEFAULT_GROUP';`