Group management
Understand group management tool scopes, features, and capabilities, with sample workflows and example prompts.
Early Access release
- Tool name
manage_group- Okta scopes
okta.groups.readandokta.groups.manage
What you can do
Create and manage groups, and manage their members and assigned apps.
Groups
- List all groups in your org with pagination
- Create new groups
- Retrieve group details including members and assigned apps
- Update group names and descriptions
- Delete groups
Group membership and apps
- Add users to groups
- Remove users from groups
- View all apps that are assigned to a group
Group rules
- List group rules
- Get a group rule
- Create a group rule
- Replace a group rule
- Delete a group rule
- Activate a group rule
- Deactivate a group rule
Note:
- Group rule names can have up to 50 characters and must be unique in your org. The check isn't case-sensitive, so
Salesandsalesconflict. A duplicate name returns the errorPolicy rule name already in use. - You can exclude up to 100 users from a rule. Exceeding this limit returns the error
Cannot exclude more than 100 users.
Key features
- Paginate through large result sets using a cursor (max 200 items per page)
- Restrict actions based on your granted OAuth scopes
- Reduce processing costs with token-optimized responses
- Include custom profile attributes in responses
Sample use cases
| Use case | Prompt | Result |
|---|---|---|
| The admin is initiating a Finance-Engineering project and needs one shared group with a clear name and description with Alice added from the project team so membership is set up correctly from the start. | Create a group called 'FinEng Project' with the description 'Finance and Engineering project team', add Alice to it, then show me the group's members so I can confirm she was added. | The 'FinEng Project' group is created with its description, Alice is added, and the group's member list is shown so you can confirm she is in it. |
| The admin has collected a handful of groups over time and suspects some are empty and no longer needed. Before deleting anything, the admin wants to see each group's member count to spot empty groups and decide what to remove. | List my groups and show the member count for each, then flag any group that has zero members so I can decide whether to delete it. | Your groups are listed with each one's member count, and any empty group is flagged as a deletion candidate, with a note that built-in groups like Everyone and Okta Administrators can't be deleted. |