User Groups
User Groups
Entra ID group sync requires StackGen to enable a tenant flag (Helm chart). It is not self-serve in the UI yet. Contact support@stackgen.com or your Customer Service Manager.
Automatic sync of user group membership from Entra is not available in the current cut. That lands in a follow-up release.
The Groups UI is available on Infra Ops (StackGen core) today. Group APIs can be used across apps (for example Backstage). Expanding the UI beyond Infra Ops is planned.
Use user groups to manage project access at scale. Create a group, add users (and nested groups when needed), then assign the group to a project with a role (Admin, DevOps, or Developer).
Why use groups
- Scale RBAC when many users share the same project role.
- Mirror organization structure with nested groups.
- Align with Microsoft Entra ID groups when sync is enabled for your tenant.
- Automate membership changes through APIs when the UI is not enough.
Create a group
- Open the Enterprise experience and go to User Management (members and groups).
- Open Groups.
- Create a group and give it a clear name.
- Add users to the group.
- Optionally add nested groups if your organization uses nested access models.
Assign a group to a project
- Open the project you want to update.
- Open project members.
- Add a user group (search and select the group).
- Choose the project role for that group: Admin, DevOps, or Developer.
- Save.
Members of the group receive that project role based on group membership.
Entra ID group sync
If your organization uses Microsoft Entra ID, StackGen can sync groups into StackGen when enablement is configured for the tenant.
| Capability | Status in this release |
|---|---|
| Sync groups from Entra | Available when StackGen enables the tenant flag |
| Customer self-serve sync setup in UI | Not available (support / Helm flag) |
| Automatic sync of membership inside groups | Not in this cut (follow-up) |
For Entra OAuth app registration used for sign-in, see Configure Your Microsoft Entra ID (Azure AD) OAuth 2.0.
API access
Group APIs support customers and integrations that manage access outside the Infra Ops UI (for example Backstage). Use the API when you need group operations across apps while the Groups UI remains Infra Ops scoped.