> For the complete documentation index, see [llms.txt](https://docs.sonarsource.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/user-groups.md).

# Managing user groups

SonarQube Cloud's user groups can be used to manage organization members and their permissions. This section explains how to manage user groups.

This feature is only available in the [Enterprise plan](https://www.sonarsource.com/plans-and-pricing/#sonarqube-cloud-features).

With the Free plan organization, only the built-in groups are used and you cannot change them.

User groups are used to manage organization members and their permissions. This article describes how to create, update, or delete user groups. For more information about user groups, see [User group concept](/sonarqube-cloud/administering-sonarcloud/about-sonarqube-cloud-solution/user-management/user-group-concept.md).

{% hint style="warning" %}
Group memberships for SSO users are automatically synchronized and must be managed exclusively through your identity provider (see [About SSO and provisioning](/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/about.md#scim) or [About SSO and provisioning](/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/about.md#just-in-time) for more details). In the UI, SCIM groups are referred to as IdP-managed groups.
{% endhint %}

You must be an organization admin to be able to manage the user groups of the organization.

{% hint style="warning" %}
Group memberships for SSO users are automatically synchronized and must be managed exclusively through your identity provider. See [About SSO and provisioning](/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/about.md#just-in-time) for more details.
{% endhint %}

## Creating a new user group <a href="#create-group" id="create-group"></a>

1. Retrieve your organization. See [Retrieving your organizations](/sonarqube-cloud/getting-started/viewing-organizations.md) for more details.
2. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
3. Select the **Create Group** button. The **Create Group** dialog opens.
4. Enter the group name and description.
5. Confirm with **Create**. The new group is added to the list.
6. In the **Members** column, select the pen icon to add users to the group: see below.

## Adding/removing users to/from a group <a href="#add-remove-users" id="add-remove-users"></a>

{% hint style="warning" %}
If you add an SSO user to a SonarQube Cloud group that doesn't exist in the identity provider, the user will be removed from that group on their next login.
{% endhint %}

To add or remove a user group to/from a group:

{% hint style="warning" %}
If you add a JIT SSO user to a SonarQube Cloud group that doesn't exist in the identity provider, the user will be removed from that group on their next login.
{% endhint %}

To add or remove a user group to/from a group:

1. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
2. In the **Members** column, select the pen icon next to the group you want to change. The **Update users** dialog opens.
3. Select the **All** option. All users belonging to the organization are listed.
4. Select or unselect the check box to add or remove a user to or from the group.
5. Select the **Close** button.

## Changing the name or description of a group <a href="#change-name-or-description" id="change-name-or-description"></a>

1. Retrieve your organization. See [Retrieving your organizations](/sonarqube-cloud/getting-started/viewing-organizations.md) for more details.
2. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
3. Select the three-dot menu to the far right of the group you want to change.
4. In the menu, select the **Update details** command. The **Update Group** dialog opens.
5. Edit the group details and select the **Update** button.

## Deleting a user group <a href="#delete-group" id="delete-group"></a>

Note that:

* You cannot delete the **Members** group.
* You cannot delete an IdP-managed group.
* You can only delete a group if it does not result in the removal of all organization admins.

To delete a group:

1. Retrieve your organization. See [Retrieving your organizations](/sonarqube-cloud/getting-started/viewing-organizations.md) for more details.
2. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
3. Select the three-dot menu to the far right of the group you want to delete.
4. In the menu, select the **Delete** command and confirm.

## Related pages <a href="#related-pages" id="related-pages"></a>

* [Adding organization members](/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/organization-members.md)
* [Managing organization permissions](/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/organization-permissions.md)
* [User onboarding and offboarding](/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/user-on-and-offboarding.md)
* [Disabling GitHub member synchronization](/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/github-member-sync.md)
* [Recovering organization admin access](/sonarqube-cloud/administering-sonarcloud/managing-organization/recovering-org-admin-access.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/user-groups.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.