# End-user group management
Workato Identity enables you to create and manage end-user groups. You can store end-users and end-user groups at the account level (above environments) and assign access to specific groups. This lets builders scope user access more securely.
# End-user groups
You must add end-users to Agentic with your external IdP or add end-users manually before you can assign them to a user group. You can assign specific access for each end-user group. Each end-user group must have at least one end user assigned to it.
# Create an end-user group
Complete the following steps to create an end-user group:
Sign in to Workato.
Click Workspace admin in the sidebar. The Access control page displays by default.
Click End-user groups in the sidebar.
Click + Create end-user group.
Provide a name for the group in the Group name field.
Create the end-user group
Select the end-users you plan to add to the end-user group. Each end-user group must include at least one end user.
Click Create.
# Add end users to an end-user group
Complete the following steps to add end users to an end-user group:
Sign in to Workato.
Go to AI Hub and select the feature where you plan to add end users to an end-user group.
Click End user access.
Click Add end-user groups.
Use the End-user groups drop-down menu to select the end-user groups you plan to provide with access.
Select end-user groups
Click OK when you're finished adding end-user groups.
Click Add.
Last updated: 7/24/2025, 6:22:04 PM