Associated Users for User Groups

Scalefusion allows a user to belong to multiple user groups while maintaining a single Primary Group. This enables administrators to organize users across different groups for identity management, and SCIM provisioning without duplicating user accounts. To understand how this works, it is important to understand what is a user's Primary Group and what are Associated Groups:

• Primary Group: The main group to which a user belongs. A user can have only one primary group at a time, and the user's devices receive their profile and policies from this group.

• Associated Groups: Additional groups with which a user is associated. These associations allow the user to be part of group-based operations such as SSO assignments, SCIM provisioning, and exceptions without changing the user's primary group or the policies applied to their devices.

Using associated groups, administrators can:

• Assign users to multiple groups.

• Manage associated group memberships independently.

• Change a user's primary group when required.

• Synchronize memberships across multiple groups using SCIM.

Group Membership Limits

This article explains how to add and manage associated users, switch a user's primary group, remove user associations, and understand how associated groups work with SSO, group exceptions, and SCIM provisioning.

Pre-Requisites

1. User Group should exist on Scalefusion Dashboard

Adding Users as Associated Users

1. On Scalefusion Dashboard, navigate to Groups > User Groups and click on View Details over the group under which you want to add associated users.

   

2. Under Associated Users tab, click on Add Users
   

   The user's devices will get the profile from the Primary group only.

   
   

3. This will bring up Add Users dialog. Select the users you want to add as associated users and click Submit

   Note: If a user is also part of a primary group, the primary group name will be displayed corresponding to the username
   

   

4. The associated user(s) with additional details will be displayed under the following heads:

   1. Username

   2. EmailID

   3. Phone Number

   4. Total Devices

   5. Primary Group: If the user has a primary group else it will display as N/A

   6. Actions

   

Actions on Associated Users

From the actions menu, you can take following actions on any associated user:

1. Swap: Allows you to change user’s primary group and updates the primary group of user to the current group. Click on the swap icon under Actions. Following dialog will be displayed. Here,

   1. Map this user as associated user in current primary group: Enabling this flag keeps the user associated with their current primary group after the swap.
      

      

2. Delete: This will remove association of user from this group. Users may lose access to applications and other mapped settings. Click on the delete icon. It will bring up the following confirmation pop-up:
   

Audit Logs

All actions performed here, such as addition, removal or swapping of associated users, are recorded and can be viewed in the Account Activity Report for audit and tracking purposes.