Get Started: Agent Groups

Use Agent Groups to organize and grant agents application access in JumpCloud. Agent Groups operate similarly to User Groups for users: a single place to manage membership and assign which applications are available to agents.

With agent groups you can:

• Organize related agents (for example infrastructure automation or ITSM integrations).
• Assign SSO applications to the group once, so member agents inherit those apps as available.
• Scale access review and updates without associating each application to every agent.

Application access for agents is group controlled in Public Preview. Direct agent-to-application assignment is not supported. For how groups link to SSO applications and AI Gateway, see Get Started: Agent Identities.

Prerequisites:

• You must have the Administrator with Billing, Administrator, or Manager role to manage agent groups. See Admin Portal Roles to learn more.
• Create at least one agent if you want to add members immediately. You can also create an empty group first.

Considerations:

• Agent Group Membership is static only. Dynamic group membership is not supported.
• Removing an agent from a group removes access inherited through that group. It does not delete the agent.
• Removing an application from a group removes inherited availability for agents in that group. It does not delete the SSO application.
• Deleting an agent group removes agent and application associations for that group. Agents themselves are not deleted. Agents may lose app access granted through the group.

Accessing Agent Groups

1. Log in to the JumpCloud Admin Portal.
2. Go to Identity Management > Agent Groups.
3. The Agent Groups list displays.
   

Viewing Agent Groups

From the Agent Groups list you can:

• Add and delete agent groups.
• Search for groups.
• Open a group to manage members and applications.

The table displays columns:

• Name: Agent group display name. Click to open the group.
• Description: Optional short description.
• Created: Date the group was created.

Creating Agent Groups

1. From the JumpCloud Admin Portal, go to Identity Management > Agent Groups and click + Add.
2. (Required) Enter the group’s Name.
3. (Optional) In Description, enter a short description of the group.
4. Click Add.
   

Adding Agents to a Group

1. Open the agent group.
2. Select the Agents tab.
3. Select agents from the list (use show assigned only if available).
4. Save your changes when prompted by the page save bar.
   

Connecting Groups to Applications

All agent application access is denied until an agent is connected through group membership.

To connect SSO applications to an agent group:

1. Open the agent group.
2. Select the Applications tab.
3. Select the SSO applications to assign to the group.
4. Save your changes.

Member agents then see those applications on their Applications tab as available. Each agent still uses Manage connections to finish MCP authorization for that specific agent.

See the following articles to learn more:

• Get Started: Agents
• Get Started: AI Gateway

Editing and Deleting Agent Groups

Edit group name or description

1. Open the agent group.
2. Click Edit.
3. Update Name and Description.
4. Click Save.

Delete an agent group

Deletion permanently removes this agent group and its associations. This can’t be undone.

1. Open the agent group (or select groups on the list).
2. Choose Delete group (or bulk delete).
3. Confirm when prompted.

Understanding Agent Groups and User Groups