Using groups to organize a collection of user identities can make it easier to manage access to applications. See Application access control.
You can create groups within an environment or within a population. However, after a group is created, the following conditions apply:
- You cannot move the group:
- From one population to another
- From a population to an environment
- From an environment to a population
- Users that are removed from a population are also removed from the corresponding population-level group.
- End users cannot add or remove themselves from groups.
You can have up to 100,000 groups per environment, and each group can have an unlimited number of users. A single user can belong to up to 10,000 groups.