Create and manage groups · BreezeAuth Docs

Groups can be created and maintained by hand in the admin console, or provisioned automatically from another system, such as your HR platform or another directory, using SCIM. This page covers both.

Find the groups of your organization

Sign in to the admin console.
In the sidebar, select Groups.

The list shows every group in the organization. Use the search box to find a group by name, and select a row to open it. Each group has three tabs: Overview, with its details; Members, with its users and groups; and Assigned applications, with the applications it gives access to.

Create a group

In the sidebar, select Groups, then New group.
Fill in the fields described below.
Select Create group.

Field	Description
Name	The name people see, for example “Finance”. Between 3 and 150 characters.
Identifier	A short, unique name for integrations, for example `finance`. Use only lowercase letters, numbers and hyphens, such as `finance-team`. No two groups in the organization can share an identifier.
Description	Optional. What the group is for, so other administrators know when to use it. Up to 1,000 characters.

The group is created empty. Next, add members and assign applications.

Tip: name groups after what they represent, such as a team, a department or a function (“Accounts payable”), not after an application (“ERP users”). A team-based group can be given access to several applications, and stays useful when applications change.

Update a group

Open the group from the Groups list.
Select Edit.
Change the Name, Identifier or Description, then select Save changes.

Renaming a group doesn’t affect its members or its application access.

Important: integrations may refer to a group by its Identifier. Before changing it, check with whoever maintains your integrations.

Delete a group

A group can only be deleted when it has no members: neither users nor groups, direct or indirect. This protects you from removing access from people by accident.

Open the group and select the Members tab.
Remove every direct member. Indirect members disappear on their own once the groups they come from are removed.
Select Delete, then confirm in the Delete group dialog.

Important: deleting a group cannot be undone. Its application assignments are removed together with it. If the group’s members still need those applications, give them access another way first.

Provision groups automatically with SCIM

If your company already maintains groups in another system, such as an HR platform or another identity directory, that system can create, rename and delete groups in BreezeAuth automatically, and keep their members in sync, using the SCIM 2.0 standard. See SCIM provisioning to set it up, and Provision groups with SCIM for how groups and their members are synchronized.

Groups created through SCIM are regular groups: you can see them, and their members, in the admin console. Avoid editing provisioned groups by hand, though: the provisioning system considers itself the source of truth and may undo your changes on its next sync.

Changes are audited and can be sent to your systems

Creating, updating and deleting groups, and adding or removing members, are recorded in your organization’s Audit Logs. Your systems can also be notified of these changes through webhooks.