# Managing user groups

This feature is only available in the [Enterprise plan](https://www.sonarsource.com/plans-and-pricing/#sonarqube-cloud-features).

With the Free plan organization, only the built-in groups are used and you cannot change them.

User groups are used to manage organization members and their permissions. This article describes how to create, update, or delete user groups. For more information about user groups, see [user-group-concept](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/about-sonarqube-cloud-solution/user-management/user-group-concept "mention").

{% hint style="warning" %}
Group memberships for SSO users are automatically synchronized and must be managed exclusively through your identity provider (see [scim](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/about/scim "mention") or [jit-provisioning](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/about/jit-provisioning "mention") for more details). In the UI, SCIM groups are referred to as IdP-managed groups.
{% endhint %}

You must be an organization admin to be able to manage the user groups of the organization.

{% hint style="warning" %}
Group memberships for SSO users are automatically synchronized and must be managed exclusively through your identity provider. See [jit-provisioning](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/enterprise-security/sso-and-provisioning/about/jit-provisioning "mention") for more details.
{% endhint %}

## Creating a new user group <a href="#create-group" id="create-group"></a>

1. Retrieve your organization. See [viewing-organizations](https://docs.sonarsource.com/sonarqube-cloud/getting-started/viewing-organizations "mention") for more details.
2. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
3. Select the **Create Group** button. The **Create Group** dialog opens.
4. Enter the group name and description.
5. Confirm with **Create**. The new group is added to the list.
6. In the **Members** column, select the pen icon to add users to the group: see below.

## Adding/removing users to/from a group <a href="#add-remove-users" id="add-remove-users"></a>

{% hint style="warning" %}
If you add an SSO user to a SonarQube Cloud group that doesn't exist in the identity provider, the user will be removed from that group on their next login.
{% endhint %}

To add or remove a user group to/from a group:

{% hint style="warning" %}
If you add a JIT SSO user to a SonarQube Cloud group that doesn't exist in the identity provider, the user will be removed from that group on their next login.
{% endhint %}

To add or remove a user group to/from a group:

1. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
2. In the **Members** column, select the pen icon next to the group you want to change. The **Update users** dialog opens.
3. Select the **All** option. All users belonging to the organization are listed.
4. Select or unselect the check box to add or remove a user to or from the group.
5. Select the **Close** button.

## Changing the name or description of a group <a href="#change-name-or-description" id="change-name-or-description"></a>

1. Retrieve your organization. See [viewing-organizations](https://docs.sonarsource.com/sonarqube-cloud/getting-started/viewing-organizations "mention") for more details.
2. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
3. Select the three-dot menu to the far right of the group you want to change.
4. In the menu, select the **Update details** command. The **Update Group** dialog opens.
5. Edit the group details and select the **Update** button.

## Deleting a user group <a href="#delete-group" id="delete-group"></a>

Note that:

* You cannot delete the **Members** group.
* You cannot delete an IdP-managed group.
* You can only delete a group if it does not result in the removal of all organization admins.

To delete a group:

1. Retrieve your organization. See [viewing-organizations](https://docs.sonarsource.com/sonarqube-cloud/getting-started/viewing-organizations "mention") for more details.
2. Go to **Groups**. The **Groups** page opens with the list of user groups for the organization.
3. Select the three-dot menu to the far right of the group you want to delete.
4. In the menu, select the **Delete** command and confirm.

## Related pages <a href="#related-pages" id="related-pages"></a>

* [organization-members](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/organization-members "mention")
* [organization-permissions](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/organization-permissions "mention")
* [user-on-and-offboarding](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/user-on-and-offboarding "mention")
* [github-member-sync](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/managing-organization/users-and-permissions/github-member-sync "mention")
* [recovering-org-admin-access](https://docs.sonarsource.com/sonarqube-cloud/administering-sonarcloud/managing-organization/recovering-org-admin-access "mention")