Skip to main content
SCIM (System for Cross-domain Identity Management) standardizes the process of provisioning groups of users to Connect AI and assigning roles. Use the Groups tab to sync SCIM groups to your Connect AI account and assign roles to the group. Only SCIM groups are supported.
SCIM groups must be enabled on your account. See SCIM Groups for the prerequisites and for instructions on configuring group provisioning in your identity provider (IdP).
Groups tab listing each SCIM group with its workspaces, user count, and access roles
The tab contains the following information:
  • A search bar for entering a group name.
  • Lists for filtering by workspace name, role, and user.
  • A row for every group in your account:
    • Group displays the SCIM group name synced to your Connect AI account.
    • Workspaces displays the workspace or workspaces the group is a member of.
    • Users displays the number of users in the group.
    • Access Roles displays one or more access roles assigned to the group. See Roles for more information.
    • Edit and delete icons for the group. Deleting a group in Connect AI disables it. The group still exists in your IdP. See Deleted Groups.
The group name and membership are read-only in Connect AI. You create and update groups and manage their membership in your IdP, and SCIM keeps Connect AI in sync. Deleting a group in Connect AI does not delete it from your IdP. To delete a group entirely, delete it in your IdP. When a user is added to or removed from a synced group in your IdP, Connect AI provisions the user or updates their access automatically.

​
Add Groups

1
In the Groups tab of the Identities page, click + Add Group to open the Add Group dialog.
Add Group dialog listing the SCIM groups available to sync
2
Select the SCIM group or groups to sync to your Connect AI account.
SCIM groups that are already synced are dimmed.
3
Click Confirm to add the SCIM groups.
To add a group to a workspace, see Add a Group to a Workspace.

​
Edit Groups

Click a group in the list (or click the edit icon) to open the Edit Group page.
Edit Group page showing the group name, Workspaces tab, access roles, and permissions
This page contains the following information:
  • A non-editable Name field.
  • A Workspaces tab with an Access Role list where you add or remove access roles for the selected workspace.
    • The Permissions section shows the permissions for the selected access role (view only). See Permissions for more information about roles and permissions.
    • A Users tab, nested in the workspace view, lists the group members who have access to that workspace (view only).
  • A Users tab that lists all users assigned to the group through your IdP (view only).
To save changes to the group, click Save Changes.

​
Manage Group Roles

To create access roles, see Roles.
Use the Groups tab to manage the access roles assigned to your group in a given workspace. All current and future members of a group automatically receive the roles assigned to the group. A group can hold multiple roles, and the same role can be assigned to multiple groups.
1
In the Groups tab, click the edit icon next to the group whose roles you want to manage.
2
In the Workspaces tab, select the workspace, then select one or more access roles in the Access Role list to assign to your group. To remove a role from the group, cancel its selection.
3
Click Save Changes. The access role or roles appear in the Groups list under Access Roles.
See SCIM Groups for details on how role assignments affect group members.

​
Add a Group to a Workspace

You can add a group to a workspace so that the members of the group have access to that workspace. You can also add groups from the workspace’s Edit Workspace page. See Add a Group to a Workspace.
1
In the Groups tab, click the edit icon next to the group that you want to add to a workspace.
2
On the Workspaces tab of Edit Group, select the workspace to add the group to.
3
Click + Add to Workspace. An Add Group to Workspace dialog appears.
4
Select the group or groups that you want to include in the workspace (Step 1 in the dialog).
5
Select an Access Role for the group in the workspace, if desired (Step 2 in the dialog).
6
Click Add. The workspace appears in the Workspaces tab of the Edit Group page.
See Workspaces for more information about managing workspaces.

​
Deleted Groups

When you delete a group in Connect AI, the group is disabled, not deleted. It no longer appears on the Groups tab, but it stays in the account and can be turned back on. To add the group back, click + Add Group and select it. See Add Groups. While a group is disabled, its members lose the access roles that they received through the group. The group’s workspace and role assignments are kept, so the members regain access when you add the group back. When you delete a group in your IdP, it is deleted permanently from Connect AI on the next sync.
Last modified on October 26, 2026