PingOne

Groups

Using groups to organize a collection of user identities can make it easier to manage access to applications. See Application access control.

About groups

You can create groups within an environment or within a population. However, after a group is created, the following conditions apply:

  • You cannot move the group:

    • From one population to another

    • From a population to an environment

    • From an environment to a population

  • Users that are removed from a population are also removed from the corresponding population-level group.

  • End users cannot add or remove themselves from groups.

You can have up to 100,000 groups per environment, and each group can have an unlimited number of users. A single user can belong to up to 10,000 groups.