---
title: "Get started with Security Groups"
description: "Create a security group in TIR with an inbound and an outbound rule, then attach it to a resource."
content_type: "get-started"
product: "tir-security-group"
platform: "TIR"
url: "/tir/tir-security-group/get-started/"
---

# Get started with Security Groups

Create a security group that lets SSH in and all traffic out, then attach it to a resource so the rules
apply there.

## Before you begin

You need a TIR project in Delhi or Chennai, a role that lets you create security groups,
and a running instance to attach the group to.

## Create a security group

1. In TIR, open your project. In the side menu, under **PLATFORM SERVICES**, select **Networking**,
   then **Security Groups**, then **Create Security Group**.
2. Keep or change the suggested **Security Group Name**.
3. In **Inbound Rules**, set **Type** to **SSH** and **Source** to **Any Network**, then select
   **Add Rule**.
4. Open **Outbound Rules**, keep **Type** as **All Traffic** and **Destination** as
   **Any Network**, then select **Add Rule**.
5. Select **Create Security Group**.

A group needs both rules before you can create it.

## Attach it to a resource

1. Open the instance, and open the **Security Groups** tab under **Network & Security**.
2. Under **Select Security Groups**, choose your new group, and select **Attach**.

The group is attached, and the resource follows its rules from then on. The group's
**Associated Services** tab on the **Security Groups** page now lists the resource too. For an inference
service, a Slurm cluster, or a VM, see
[Attach or detach a security group](/tir/tir-security-group/how-to/attach-or-detach-a-security-group/).

## What to do next

To let SSH in from your own address only, or to open a web port, change the rules as
[Manage security group rules](/tir/tir-security-group/how-to/manage-security-group-rules/) describes.
[Security groups and rules](/tir/tir-security-group/concepts/security-groups/#rules-for-common-setups)
has rule sets for common setups.

To keep a fixed address for the resource,
[reserve an IP](/tir/tir-reserved-ip/how-to/reserve-an-ip-address/). For help with any message,
see [Troubleshooting Security Groups](/tir/tir-security-group/troubleshooting/tir-security-group/).