---
title: "Associated Users for User Groups"
slug: "associated-users-for-user-groups"
tags: ["OneIdP user authentication", "user groups", "groups"]
updated: 2026-07-06T13:15:09Z
published: 2026-07-06T13:15:09Z
canonical: "help.scalefusion.com/associated-users-for-user-groups"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Associated Users for User Groups

Scalefusion allows a user to belong to multiple user groups while maintaining a single **Primary Group**. This enables administrators to organize users across different groups for identity management, and SCIM provisioning without duplicating user accounts. To understand how this works, it is important to understand what is a user's Primary Group and what are Associated Groups:

- **Primary Group:** The main group to which a user belongs. A user can have only one primary group at a time, and the user's devices receive their profile and policies from this group.
- **Associated Groups:** Additional groups with which a user is associated. These associations allow the user to be part of group-based operations such as SSO assignments, SCIM provisioning, and exceptions without changing the user's primary group or the policies applied to their devices.

Using associated groups, administrators can:

- Assign users to multiple groups.
- Manage associated group memberships independently.
- Change a user's primary group when required.
- Synchronize memberships across multiple groups using SCIM.

## Group Membership Limits

| Membership Type | Minimum | Maximum |
| --- | --- | --- |
| **Primary Group** (The main group to which a user belongs) | 0 | 1 |
| **Associated Groups** (Additional groups with which a user can be associated) | 0 | No limit |

This article explains how to add and manage associated users, switch a user's primary group, remove user associations, and understand how associated groups work with SSO, group exceptions, and SCIM provisioning.

## Pre-Requisites

1. User Group should exist on Scalefusion Dashboard

## Adding Users as Associated Users

1. On Scalefusion Dashboard, navigate to **Groups > User Groups and** click on **View Details** over the group under which you want to add associated users.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-S52IIYVF.png)
2. Under **Associated Users** tab, click on **Add Users**

> [!WARNING]
> The user's devices will get **the profile** from the **Primary group** only.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-KC3S69HK.png)
3. This will bring up **Add Users** dialog. Select the users you want to add as associated users and click **Submit**

**Note:** If a user is also part of a primary group, the primary group name will be displayed corresponding to the username

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-9ZAGPDZ4.png)
4. The associated user(s) with additional details will be displayed under the following heads:

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-KCWV8U04.png)
  1. Username
  2. EmailID
  3. Phone Number
  4. Total Devices
  5. Primary Group: If the user has a primary group else it will display as N/A
  6. [Actions](/v1/docs/associated-users-for-user-groups#actions-on-associated-users)

## Actions on Associated Users

From the actions menu, you can take following actions on any associated user:

1. **Swap:** Allows you to change user’s primary group and updates the primary group of user to the current group. Click on the swap icon under Actions. Following dialog will be displayed. Here,
  1. **Map this user as associated user in current primary group:** Enabling this flag keeps the user associated with their current primary group after the swap.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-AKTR4INQ.png)
2. **Delete:** This will remove association of user from this group. Users may lose access to applications and other mapped settings. Click on the delete icon. It will bring up the following confirmation pop-up: ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-05OSMJ4A.png)

## Audit Logs

All actions performed here, such as addition, removal or swapping of associated users, are recorded and can be viewed in the **Account Activity Report** for audit and tracking purposes.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-MU03VBRJ.png)

---

### FAQ

#### **Does an associated user inherit the group's SSO configuration?**

Yes. If an SSO configuration is assigned to a user group, all associated users of that group are automatically assigned the same SSO configuration.

#### **Are associated users included in group exceptions?**

Yes. If a user group is added as an exception, all associated users of that group are automatically included in the exception list.

#### **How do associated users work with SCIM?**

If SCIM is enabled for a user group, all associated users of that group are provisioned through SCIM, and changes to associated group memberships are synchronized with the SCIM provider.

- **SCIM Inbound:** If the same user belongs to multiple groups in the SCIM provider’s console, the user is created as the **primary user** in one group and as an **associated user** in the remaining groups within Scalefusion. This applies to Entra, Google Workspace, OPC (Active Directory).
- **SCIM Outbound:** If a user belongs to multiple groups in Scalefusion, the user is provisioned to all corresponding groups that have been created on the SCIM provider’s console.

#### What happens if a user already exists in a Scalefusion group during a SCIM sync?

If the user already belongs to a locally created group or an imported group in Scalefusion, the user's **existing primary group remains unchanged**. Any additional groups received during the next SCIM sync are added as associated groups.