---
title: Add an Access Group to allow access
canonical: https://openvpn.net/cloud-docs/owner/access/access---groups/add-an-access-group-to-allow-access/
product: CloudConnexa Docs
description: A default-deny policy is used when the WPC topology is set to custom. Access Groups must be configured to allow access between connected entities.
keywords: Allow access
---

# Add an Access Group to allow access

A default-deny policy is used when the WPC topology is set to custom. Refer to [Topology](https://openvpn.net/cloud-docs/owner/settings/settings---wpc/set-wpc-topology-to-control-the-applicability-of-access-control.md). Access Groups must be configured to allow access between connected entities.

To add an Access Group, follow the steps below:

> **Note**
>
> For Access Groups to take effect, the **Topology** of the **WPC** must be set to **Custom.** Refer to [Topology](https://openvpn.net/cloud-docs/owner/settings/settings---wpc/set-wpc-topology-to-control-the-applicability-of-access-control.md).

1. Sign in to your WPC's Administration Portal at your **Cloud ID** address (for example, `yourcompany.openvpn.com`).
2. Navigate to **Access \> Groups**.
3. Click **Add Access Group**.
4. Provide a **Name** and, optionally, a **Description**.
5. Expand/Collapse and search the **Hosts, Networks, and User Groups** sections in the **Source** column to find the entity that you want to give access to.
6. Click on the check boxes of the source entities to select.
7. Expand/Collapse and search the **Hosts, Networks, and User Groups** sections in the **Destination** column to find the resources you want access to be granted. You will see an **Applications shared with you** section as a **Destination** if you have accepted access to shared applications using **AppHub**. Refer to [Access control](https://openvpn.net/cloud-docs/owner/apphub/app-client-controls-access-to-the-shared-applications.md)

   > **Note**
   >
   > The tree structure used in the User Interface (UI) is only for organization purposes. For example, selecting the check-box for a Network as a destination means that all the Applications and IP Services configured for the Network are accessible. It does not mean the entire Network's subnet, protocol, and port range is accessible.
8. Click on the check boxes of destination resources to select.
9. Click **Add Access Group.**

> **Warning**
>
> After adding an **Access Group**, delete the **Default Full Mesh Access Group** if it exits. The continued presence of the **Default Full Mesh Access Group** will make other **Access Groups** ineffective.

## Tutorial showing the addition of an Access Group

---

Prev: [About Access Groups](https://openvpn.net/cloud-docs/owner/access/access---groups/about-access-groups.md)
Next: [Edit an existing Access Group](https://openvpn.net/cloud-docs/owner/access/access---groups/edit-an-existing-access-group.md)
Index: https://openvpn.net/cloud-docs/llms.txt