Create a group
Define a group for a department, team, project, privileged function, service account or AI agent.
Groups and Application Access
Manage access by group—not user by user.
Create groups around teams, departments or responsibilities, then assign the applications that group members need. When membership changes, access follows the group structure.
The administrative problem
Individual assignments become difficult to control.
When every application is assigned separately to every user, onboarding slows down and access becomes inconsistent. Group-based administration creates a repeatable structure.
Administrators manage membership once, connect approved applications to the group, and keep the relationship easier to review.
How it works
Create. Populate. Assign. Review.
Add members
Place the appropriate identities into the group and maintain membership as responsibilities change.
Assign applications
Connect approved applications to the group instead of repeating assignments for each user.
Review and remove
Review group membership and application access, then update or revoke it when the need ends.
Application access by group
Connect the group to the right applications.
Assign application access based on group or department membership. Access can be permanent or time-bound, helping teams support standard access, projects and temporary assignments.
- Manage access for a complete group
- Align applications with departments
- Support valid-from and valid-to dates
- Review and revoke access centrally
Where groups fit
Use a clear structure for different identity types.
Departments
Finance, operations, IT, HR and other business functions.
Project teams
Temporary groups with time-bound application access.
Privileged users
Separate higher-impact users for stronger access control.
Service accounts
Organize non-human identities used for automation and services.
AI agents
Place agent identities into defined, reviewable access groups.
Contractors
Limit access to approved systems for the engagement period.
Governance and evidence
Make group access easier to explain.
Review who belongs to the group, which applications are connected, and whether the access remains appropriate.
✓ Group purpose
✓ Current members
✓ Assigned applications
✓ Access duration
✓ Membership changes
✓ Access removal
Simplify application administration
See group-based access with your applications.
Map teams, departments and identity types to the applications they need.