Skip to main content

Smart Groups

Smart Groups are named sets of people that you reuse across the console: in Policy Engine conditions, browser and endpoint controls, and access assignments in Roles and permissions.

Go toQuilrAI ConsoleSettingsOrganizationSmart GroupsCreate Smart Group

Create a Smart Group​

Select Create Smart Group, enter a Name (for example "Finance approvers") and an optional Description, and select at least one user. To add more people later, open the group with View, or bulk add them from a CSV file.

Bulk add members from a CSV​

Import from CSV adds the people listed in a file to one or more existing Smart Groups. Create the groups first.

The file needs a column headed email. Other columns are ignored:

email,name
alice@example.com,Alice
bob@example.com,Bob
  1. Select Import from CSV, then Select CSV. The modal shows how many email addresses it found and a preview of the file.
  2. Select Next to Choose Smart Groups, then search for and select the groups to add the people to.
  3. Select Queue bulk add. The add runs in the background.
  4. Follow it with the Bulk add progress button next to Import from CSV. Each job shows Queued, In progress, Completed or Failed, with the error for a failed job.

One import can include at most 10,000 email addresses. Invalid addresses, people who are not in Quilr, and people already in the group are skipped. If the file has no email column, the modal asks you to add one and select the file again.

A CSV import only adds people. It never removes anyone, and importing the same file again changes nothing. To make a group match a list exactly, remove the extra members as described below.

Membership changes and removal​

  • Add: in the group's View drawer, use Add users to group or Import from CSV.
  • Remove: in the View drawer, select members and choose Remove users from group. The confirmation reads: "Policies and access rules that target this group will no longer apply to them."
  • Delete: Delete Smart Group in the View drawer removes the group. Check first that no policy condition still names it.
  • Timing: membership changes reach the AI gateways' policy checks within about a minute.

The View drawer also shows each member's IdP user groups and IdP user status.

Groups converted from your identity provider​

Groups converted from a user group in your identity provider are tagged Converted from IdP group in the list. Their membership comes from your identity provider.

The list​

Search by name. Columns: Smart Group, Members, Updated, Created and View. Select View to see and edit a group's members.

Using Smart Groups in policies​

  • In the Policy Engine, the Smart group scope shortcut adds a group condition with a seeded priority of 700. That places it above an everyone default and below a rule for one person.
  • Policy conditions match Smart Group names ignoring case.
  • Smart Groups are distinct from the roles that grant console access.
tip

Prefer Smart Groups over lists of individual users in policies. When someone joins or leaves the group, every policy that uses it updates without a new revision.

On this page