# Managing account groups

With an Enterprise license, you can optionally create user groups.

A group can be assigned workspace roles. Group users then inherit the workspace permissions for that role.

Accounts that use single sign-on (SSO) can optionally [synchronize their SSO groups with their Fabricate groups](/fabricate/fabricate-accounts-and-users/managing-account-users/single-sign-on-sso/sso-fabricate-config.md#synchronizing-sso-groups-with-fabricate-account-groups). When the SSO connection is configured to synchronize groups, then when an SSO user belongs to an SSO group that matches the name of an existing Fabricate group, they are automatically added to the group.

If the group does not yet exist in Fabricate, then if the group name matches the [SSO group filter](/fabricate/fabricate-accounts-and-users/managing-account-users/single-sign-on-sso/sso-fabricate-config.md#limiting-the-sso-groups-for-which-to-create-fabricate-groups), Fabricate automatically creates it and assigns the user to it.

## Displaying the list of account groups

To display the list of account groups:

1. In the user menu, click **Account Settings**.
2. On the **Account Settings** page, click **Groups**.

<figure><img src="/files/rl8mN30IqZNyITuPHkHy" alt=""><figcaption><p>Groups list for an account</p></figcaption></figure>

For each group, the list includes:

* The group name.
* The number of users in the group.
* The list of workspaces that the group is granted access to.

## Creating, editing, and deleting groups

### Creating a group

To add a group to an account:

1. Click **New Group**.
2. On the **New Group** panel:
   1. In the **Name** field, provide a name for the group.
   2. Click **Create Group**.
3. On the **Edit Group** panel, provide the group configuration:
   * **Members**
   * **Workspaces**

<figure><img src="/files/VokQQm524sLgUQxE5cI6" alt=""><figcaption><p>Edit Group panel for a new group</p></figcaption></figure>

4. Click **Save Changes**.

### Editing a group

To change the configuration of a group:

1. In the group list, click the group name.
2. On the **Edit Group** panel, update the group configuration:
   * **Name**
   * **Members**
   * **Workspaces**
3. Click **Save Changes**.

### Deleting a group

To delete a group:

1. In the group list, click the delete icon for the group.
2. On the confirmation panel, click **Delete Group**.

## Managing the group membership

On the group details panel, the **Members** list displays the list of users that belong to the group. For each member, the list includes the user name and email address. It also indicates whether the group membership is synchronized with SSO.

You can also add and remove users manually. The user must already exist within your account.

### Indicating whether the group is synchronized with SSO

The **Sync with SSO** toggle indicates whether the group membership is synchronized with a corresponding SSO group. When this is on, then users who belong to a matching SSO group are automatically added to the Fabricate group.

For groups that Fabricate created automatically, **Sync with SSO** is toggled to the on position.

For groups that you create manually, **Sync with SSO** is by default toggled to the off position. To synchronize the membership with the SSO group, toggle it to the on position.

### Adding a group member

To add a group member:

1. Click **Add Member**.
2. In the dropdown list, search for and select the account user to add to the group.

### Removing a group member

To remove a member from the group, click the delete icon for the member.

## Configuring workspace access for the group

On the group details panel, the **Workspaces** list displays the list of workspaces that the group has access to.

For each workspace, the list includes the name of the workspace and the assigned role for that workspace. Group users inherit those permissions.

From the list, you can assign workspaces and workspace roles to the group.

You can also manage group access from the workspace permissions.

Changes in one place are reflected in the other. For example, if you grant access to a workspace on the group details page, then the workspace permissions include that group access. If you grant access to a group from the workspace permissions, then the group details include that workspace.

### Adding a workspace to a group

To add access to a workspace:

1. Click **Add workspace**.
2. In the dropdown list, search for and select the workspace to add.
3. From the **Role** dropdown list, select the workspace role to assign to the workspace.

### Changing the assigned role for a workspace

To change the group's assigned role for a workspace:

1. Click the current role.
2. In the dropdown list, select the new role.

### Removing a workspace from a group

To remove a workspace from a group, click the delete icon for the workspace.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/managing-account-groups.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.