Docusign CLM user groups and task groups are the two grouping tools that decide how a CLM account runs: user groups control who can see and change documents in each folder, and task groups control who receives and works the tasks a workflow creates. Getting both right keeps contracts secure and approvals moving when someone is away.
What are Docusign CLM user groups and task groups?
Docusign CLM user groups and task groups are collections of CLM users, where user groups carry folder and document access rights and task groups carry workflow task assignments. A user can belong to several of each. Group design is a security control, since an analysis of 12,195 confirmed breaches found credential abuse was the most common way attackers got in, at 22 percent.
User groups answer the question “who can open this contract?” Task groups answer “who should act on this step?” A contracts team might need view access to every sales folder, while only four of its members take first-pass review tasks.
How do user groups control folder security in Docusign CLM?
User groups control folder security in Docusign CLM by holding an access level on each folder, so every member inherits the rights granted to the group. Managing access by group is simpler and easier to audit than setting it user by user.
Docusign CLM accounts manage groups in Docusign Admin, and CLM.CM accounts use the Groups page in the CLM Admin section. Once a group exists, an administrator opens a folder, selects Manage Security, and adds the group with a permission level such as View, View & Create, or View & Edit. Three options exist for granting access:
- User groups. The default choice for department or function access, such as a Legal group with edit rights and a Sales group with view rights.
- Permission profiles. Useful when access follows a user’s role across many folders more than their department.
- Individual users. Reserve these grants for genuine exceptions, since each one is invisible to anyone reviewing group-level security.
How should you design Docusign CLM user groups?
You should design Docusign CLM user groups around the folder structure and the business functions that need access, starting from the most restricted content and working outward. Every group needs a purpose, an owner, and a defined set of folders.
A typical enterprise build needs somewhere between 10 and 30 security groups. Fewer usually means access is too broad, and many more means groups were created one request at a time. Apply three design rules:
- Function first. Build groups for departments and functions, such as Legal, Procurement, Sales Operations, and Finance, then add regional variants only where content is genuinely restricted by region.
- Least access. Grant the lowest level each group needs, so View is the default and edit rights are a documented decision.
- Clear naming. Use a consistent convention, such as function, region, and access level, so an administrator can read a folder’s security grid without looking anything up.
How do task groups assign workflow tasks in Docusign CLM?
Task groups assign workflow tasks in Docusign CLM by receiving a task from a workflow step and distributing it to a member, either automatically or by a member claiming it. Members see a shared list of the group’s tasks, and a member with the right permissions can claim a task or reassign it to another member.
Administrators create task groups from Admin, under User Management, on the Task Groups page. Each group gets a name, an optional description, a member list, and an auto-assign pattern. Tasks assigned to the group appear on the CLM Tasks page. When a workflow step, such as an approval step, points at a group, a sick day or resignation no longer stops the contract.
Which auto-assign pattern should a Docusign CLM task group use?
A Docusign CLM task group should use the auto-assign pattern that matches how its members share work: Random, Round Robin, or Least Used Resource. Round Robin assigns tasks in member list order from top to bottom, and the list cannot be rearranged after the group is created.
If the member order is wrong, the fix is rebuilding the group. Choose the pattern per group:
- Random. Assigns group tasks to members at random, which suits small teams with similar skills and similar availability.
- Round Robin. Rotates tasks through the member list in its original order, which suits teams that want an even count of assignments over time.
- Least Used Resource. Assigns each task to the member with the fewest assigned tasks, which suits teams where some tasks take far longer than others.
For most contract review queues, Least Used Resource balances real workload best.
How do task group permissions and the Managed By field work in Docusign CLM?
Task group permissions in Docusign CLM control what each member can do with group tasks, such as claiming or reassigning them, and the Managed By field names a user who can act on another user’s tasks.
The Managed By field is set on a user’s profile. If a task group member leaves the company, their manager can find the open tasks under My Managed Users on the Tasks page. There is a limit: a manager who is not a member of the task group can complete the task but cannot reassign or cancel it. Give claim and reassign rights to team leads and senior reviewers, so one person in each group can rebalance work on a busy day. Then set Managed By for every task group member, and make key managers task group members too, which gives them reassign rights as well.
How should Docusign CLM user groups and task groups work together?
User groups and task groups should be designed together, so every member of a task group already has folder access to the documents their tasks involve. A task routed to someone who cannot open the contract stalls exactly like a task routed to nobody.
Capacity is the second reason to design them together. In one 2025 survey of legal operations leaders, 63 percent of legal departments name workload and resource bandwidth as their top challenge. Task groups spread that load directly. Three checks keep the structures aligned:
- Access mapping. For each task group, list the folders its tasks touch and confirm a user group grants every member at least the access those tasks require.
- Same levels as folders. Grant user groups at the same levels as the Docusign CLM folder structure, so each grant sits somewhere predictable.
- Shared ownership. Assign one owner to review both structures together, so a membership change in one is checked against the other.
How do you test Docusign CLM user groups and task groups before go-live?
You test Docusign CLM user groups and task groups before go-live by logging in as representative users from each group and confirming what they can see, what they can change, and which tasks reach them. Administrator accounts see everything, so they hide these defects.
Test with real role accounts, since access rules never tested by role surface as failures on go-live day. Cover three areas:
- Folder access. Confirm each group sees exactly its folders, at exactly its level, including the folders it should not see at all.
- Assignment behavior. Push 10 to 20 test tasks through each task group and confirm the auto-assign pattern distributes them as expected.
- Recovery paths. Deactivate a test member mid-task and confirm the manager and group leads can find, reassign, or complete the work.
Group membership often drives approval routing, so pair this with testing that proves clause and approval logic in CLM.
How should Docusign CLM groups be maintained after go-live?
Docusign CLM groups should be maintained through a joiner, mover, and leaver process tied to HR changes, plus a quarterly review of membership and folder grants.
Maintenance is also an adoption issue: users who cannot see their contracts, or who keep receiving tasks for a team they left, stop trusting the system. Three routines prevent that:
- Change triggers. Update group membership as part of every hire, role change, and departure, with a named administrator responsible for each.
- Leaver sweep. Run a monthly report of inactive users who still hold group memberships or open tasks, and clear each one.
- Quarterly review. Have each group owner confirm membership, folder grants, and task group assignments every quarter, and record the sign-off.
Route group-related issues after launch through a single hypercare triage path with agreed severity levels, and treat group changes as configuration releases.
Conclusion
Docusign CLM user groups and task groups decide who can see each contract and who moves it forward. Build user groups around functions and least access, choose each task group’s auto-assign pattern deliberately, set Managed By and reassign rights for recovery, and map every task group to the folder access its work requires. Test both structures with real role accounts, then keep them current through HR-driven changes and quarterly reviews.
How Basla can help
Basla provides delivery teams for Docusign implementation, covering security group and task group design, workflow routing configuration, access model documentation, and role-based testing before go-live. Business analysts map each function’s access and review responsibilities into a group design, and QA specialists run role-based scenarios covering visibility, task assignment, and recovery paths.
Basla works through staff augmentation or Basla-managed delivery. It has created and executed more than 1,000 test records for one CLM implementation, and doubled delivery team capacity on another engagement to meet a compressed implementation timeline.
Frequently asked questions
What is the difference between Docusign CLM user groups and task groups?
Docusign CLM user groups and task groups are both collections of users, but user groups carry folder and document access rights, while task groups receive workflow task assignments. A user can belong to both types, and each is managed separately.
Where are user groups managed in Docusign CLM?
User groups for Docusign CLM account types are managed in Docusign Admin. For CLM.CM account types, groups are managed on the Groups page in the Admin section of the CLM application.
What auto-assign patterns do Docusign CLM task groups support?
Docusign CLM task groups support three auto-assign patterns: Random, Round Robin, and Least Used Resource. Least Used Resource assigns each task to the member with the fewest assigned tasks.
Can you change the member order of a Docusign CLM task group?
The member order of a Docusign CLM task group cannot be rearranged after the group is created. Round Robin follows the original order, so set the list carefully before saving.
What happens to tasks when a Docusign CLM task group member leaves?
Tasks from a departing Docusign CLM task group member can be handled by the user named in their Managed By field, under My Managed Users on the Tasks page. A manager outside the task group can complete those tasks but cannot reassign or cancel them.
How often should Docusign CLM groups be reviewed?
Docusign CLM groups should be reviewed every quarter, with each group owner confirming membership, folder access, and task group assignments. Membership should also update with every hire, role change, and departure.
*This article is provided for general information only and does not constitute legal advice. Basla Solutions provides legal technology implementation and support services and does not practice law.*