> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Groups

> The **Groups** tab on the ***Identities*** page enables you to manage SCIM user groups and group access roles in your Connect AI account.

SCIM (System for Cross-domain Identity Management) standardizes the process of provisioning groups of users to Connect AI and assigning roles. Use the **Groups** tab to sync SCIM groups to your Connect AI account and assign roles to the group. Only SCIM groups are supported.

> [!NOTE]
>
> SCIM groups must be enabled on your account. See [SCIM Groups](https://docs.cloud.cdata.com/en/SCIM/SCIM-Groups.md) for the prerequisites and for instructions on configuring group provisioning in your identity provider (IdP).

![Groups tab listing each SCIM group with its workspaces, user count, and access roles](https://mintcdn.com/cdata/uD05R921mW6eQWSp/en/images/groups.png?fit=max\&auto=format\&n=uD05R921mW6eQWSp\&q=85\&s=9eefcda3bbc75e017888bf62b6b425a1)

The tab contains the following information:

* A search bar for entering a group name.
* Lists for filtering by workspace name, role, and user.
* A row for every group in your account:
  * **Group** displays the SCIM group name synced to your Connect AI account.
  * **Workspaces** displays the workspace or workspaces the group is a member of.
  * **Users** displays the number of users in the group.
  * **Access Roles** displays one or more access roles assigned to the group. See [Roles](https://docs.cloud.cdata.com/en/Identities/Roles.md) for more information.
  * Edit and delete icons for the group. Deleting a group in Connect AI disables it. The group still exists in your IdP. See [Deleted Groups](#deleted-groups).

The group name and membership are read-only in Connect AI. You create and update groups and manage their membership in your IdP, and SCIM keeps Connect AI in sync. Deleting a group in Connect AI does not delete it from your IdP. To delete a group entirely, delete it in your IdP. When a user is added to or removed from a synced group in your IdP, Connect AI provisions the user or updates their access automatically.

## Add Groups

**Step 1**

In the **Groups** tab of the **Identities** page, click **+ Add Group** to open the **Add Group** dialog.

![Add Group dialog listing the SCIM groups available to sync](https://mintcdn.com/cdata/owrUKgR0ZqNf42QA/en/images/add_group.png?fit=max\&auto=format\&n=owrUKgR0ZqNf42QA\&q=85\&s=b9eeb9b4febec8d48b04897b59fbc208)

**Step 2**

Select the SCIM group or groups to sync to your Connect AI account.
\[!NOTE] SCIM groups that are already synced are dimmed.

**Step 3**

Click **Confirm** to add the SCIM groups.

To add a group to a workspace, see [Add a Group to a Workspace](#add-a-group-to-a-workspace).

## Edit Groups

Click a group in the list (or click the edit icon) to open the **Edit Group** page.

![Edit Group page showing the group name, Workspaces tab, access roles, and permissions](https://mintcdn.com/cdata/uD05R921mW6eQWSp/en/images/edit_group.png?fit=max\&auto=format\&n=uD05R921mW6eQWSp\&q=85\&s=9ca4c2db590e38719a25a05329a49ed1)

This page contains the following information:

* A non-editable **Name** field.
* A **Workspaces** tab with an **Access Role** list where you add or remove access roles for the selected workspace.
  * The **Permissions** section shows the permissions for the selected access role (view only). See [Permissions](https://docs.cloud.cdata.com/en/Permissions.md) for more information about roles and permissions.
  * A **Users** tab, nested in the workspace view, lists the group members who have access to that workspace (view only).
* A **Users** tab that lists all users assigned to the group through your IdP (view only).

To save changes to the group, click **Save Changes**.

## Manage Group Roles

> [!NOTE]
>
> To create access roles, see [Roles](https://docs.cloud.cdata.com/en/Identities/Roles.md).

Use the **Groups** tab to manage the access roles assigned to your group in a given workspace. All current and future members of a group automatically receive the roles assigned to the group. A group can hold multiple roles, and the same role can be assigned to multiple groups.

**Step 1**

In the **Groups** tab, click the edit icon next to the group whose roles you want to manage.

**Step 2**

In the **Workspaces** tab, select the workspace, then select one or more access roles in the **Access Role** list to assign to your group. To remove a role from the group, cancel its selection.

**Step 3**

Click **Save Changes**. The access role or roles appear in the **Groups** list under **Access Roles**.

See [SCIM Groups](https://docs.cloud.cdata.com/en/SCIM/SCIM-Groups.md#access-role-assignments) for details on how role assignments affect group members.

## Add a Group to a Workspace

You can add a group to a workspace so that the members of the group have access to that workspace. You can also add groups from the workspace's **Edit Workspace** page. See [Add a Group to a Workspace](https://docs.cloud.cdata.com/en/Workspaces.md#add-a-group-to-a-workspace).

**Step 1**

In the **Groups** tab, click the edit icon next to the group that you want to add to a workspace.

**Step 2**

On the **Workspaces** tab of **Edit Group**, select the workspace to add the group to.

**Step 3**

Click **+ Add to Workspace**. An **Add Group to Workspace** dialog appears.

**Step 4**

Select the group or groups that you want to include in the workspace (Step 1 in the dialog).

**Step 5**

Select an **Access Role** for the group in the workspace, if desired (Step 2 in the dialog).

**Step 6**

Click **Add**. The workspace appears in the **Workspaces** tab of the **Edit Group** page.

See [Workspaces](https://docs.cloud.cdata.com/en/Workspaces.md) for more information about managing workspaces.

## Deleted Groups

When you delete a group in Connect AI, the group is disabled, not deleted. It no longer appears on the **Groups** tab, but it stays in the account and can be turned back on. To add the group back, click **+ Add Group** and select it. See [Add Groups](#add-groups).

While a group is disabled, its members lose the access roles that they received through the group. The group's workspace and role assignments are kept, so the members regain access when you add the group back.

When you delete a group in your IdP, it is deleted permanently from Connect AI on the next sync.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.