End-user group management

Workato Identity enables you to create and manage end-user groups. You can store end-users and end-user groups with customized environment access and assign access to specific groups. This lets you scope user access more securely.

You can also enable user group syncing to automatically update user group memberships in Workato based on group information from your identity provider.

End-user groups

End-user groups are created within specific environments. You must add end-users to your external IdP or add end-users manually before you can assign them to a user group. Each end-user group must have at least one end user assigned to it.

Create an end-user group

End-user groups are specific to each environment. You must select the environment before you can create a group.

ENVIRONMENT AVAILABILITY

Workspaces without Environments provisioned only have one environment available.

Complete the following steps to create an end-user group in an environment:

1

Sign in to Workato.

2

Click Workspace admin in the sidebar. The Access control page displays by default.

3

Click Authentication & Groups in the sidebar.

4

Select the environment where you plan to create a group. The environment End-user group page displays by default.

Select the environment

5

Click + Create end-user group.

Click + Create end-user group

6

Provide a name for the group in the Group name field.

Create the end-user group

7

Select the end-users you plan to add to the end-user group. Each end-user group must include at least one end user.

8

Click Create.

Grant access to users and groups

You can provide individual users and groups with feature access.

Complete the following steps grant access to users and groups:

1

Sign in to Workato.

2

Go to End user access page of the feature where you plan to add user or group access. For example:

• Go to AI Hub > Genies > End user access.
• Go to AI Hub > Workato GO > End user access.
• Go to AI Hub > MCP servers > End user access.

3

Click Add end users.

4

Select the individual users or groups you plan to provide with feature access.

Select individual users or groups

5

Click Add.

Revoke user access to an environment

You can revoke user access to a specific environment if permissions are no longer needed.

Complete the following steps to revoke user access to an environment:

1

Sign in to Workato.

2

Click End users in the sidebar.

3

Search for and select the user profile where you plan to revoke environment access.

4

Deselect the environment checkbox to remove user access.

Remove environment access

5

Select the checkbox in the revoke access confirmation screen when prompted.

Select the checkbox in the revoke access confirmation screen

6

Click Save.