Prerequisites
Required permissions: Directory access and User Groups management
Supported platforms: All Trio-managed users
Time estimate: 3-5 minutes per group
Additional requirements: Users must be created in Trio before adding to groups
Before You Start
User groups organize users by role, department, location, or any categorization that supports your organization structure. Groups enable targeted policy assignments, simplified user management, and streamlined administrative operations.
Users can be added manually from your existing Trio user base or imported from integrated directories like Microsoft Azure. Once created, groups can be used throughout Trio for policy assignments and user management tasks.
Plan your group structure before creation to ensure logical organization and efficient management.
Step 1: Access User Groups
Navigate to Identity & Access from the main sidebar
Click User Groups from the Identity & Access sidebar
Click + Add
Step 2: Configure Group Details
Enter group name in Name field (required)
Add group description in description field (optional)
Expected result: Group configuration section completed
Group Configuration Guidelines:
Use descriptive names that clearly identify the group purpose
Include department, role, or location in group names for clarity
Add detailed descriptions to explain group purpose and membership criteria
Step 3: Review Membership Controls
Membership Controls displays as Static (default setting)
Static is selected by default. Dynamic and directory-synced group types are also available, and are configured after the group is created
Expected result: Membership Controls section shows Static configuration
Membership Controls:
Static membership requires manual user selection and management
Dynamic and directory-synced membership are also available. Dynamic groups update automatically as users match rules, and directory-synced groups mirror a connected identity provider
Step 4: Select Group Members
Click Next to proceed to Users section
Use search bar to find specific users if needed
Select checkboxes next to users to add to the group
Expected result: Selected users are marked for group membership
User Selection Details:
Users display with Name, User State, User Group, Email, and MFA status
Active users show green status indicator
Pending users show yellow status indicator
Deactivated users show red status indicator
Assign Applications (Optional)
You can assign SSO applications to the group so every member gets access automatically. These come from your configured SSO applications.
Step 5: Add Users from Directories (Optional)
Click Directories tab if integrating directory users
Select users from connected directories
Directory Integration:
Requires pre-configured directory connections (Microsoft Azure, etc.)
Directory users import directly into the group
Mixed manual and directory user selection is supported
Step 6: Complete Group Creation
Review selected users in the group
Click Next when user selection is complete
Click Save Group
Advanced Options
Bulk User Management:
Use search functionality to quickly locate specific users
Filter users by status (Active, Pending, Deactivated) for targeted selection
Review user details before adding to ensure proper group membership
Group Organization:
Create hierarchical group structures for complex organizations
Use consistent naming conventions across all groups
Document group purposes and membership criteria for team reference
Troubleshooting
Users Not Displaying:
Symptoms: Expected users missing from selection list
Cause: Users not created in Trio or filter settings
Solution: Confirm users exist in Trio and check search/filter criteria
Save Group Fails:
Symptoms: Error message when attempting to save group
Cause: Missing required information or network connectivity
Solution: Verify group name is entered and retry save operation