---
title: How to manage IAM groups
description: Instructions on managing groups within Scaleway IAM.
dates:
  validation: 2025-07-15
  posted: 2022-06-20
---
import Requirements from '@macros/iam/requirements.mdx'

You can manage IAM groups in an Organization if you are the [Owner](/iam/concepts/glossary/#owner) of that Organization, or if you have sufficient permissions (via [policies](/iam/concepts/glossary/#policy)) to do so. Management actions include adding and removing members to groups, attaching and detaching policies to/from groups and deleting groups from the Organization.

<Requirements />

- A Scaleway account logged into the [console](https://console.scaleway.com)
- [Owner](/iam/concepts/glossary/#owner) status or [IAM permissions](/iam/concepts/glossary/#permission) allowing you to perform actions in the intended Organization

## How to access the group overview

1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.
2. Click the **Groups** tab. A list of the Organization's IAM groups displays.
3. Click the name of the group you want to manage. Alternatively, click <Icon name="more" /> next to the application, and select **Overview**. Either way, you are taken to the group's **Overview** page.
    Follow the steps below depending on the management action you wish to take.

## How to edit a group's description

1. From the groups' [Overview page](#how-to-access-the-group-overview), in the **Group Information** panel, click on the text underneath **Description**.
2. Edit the description as required and click <Icon name="validate" /> to finish.

## How to manage a group's users

From the groups's [Overview page](#how-to-access-the-group-overview), scroll down to the **Users** panel. A list of all users in the group displays.

### Add users to a group

1. In the **Users** panel, click **Add users**. A pop-up displays:
2. Select the user you want to add from the drop-down menu, or type the name of the user.
3. Click **Validate**. You are returned to the group's overview page, where the newly-added user now appears.

<Message type="important">
  Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

### Remove users from a group

1. In the **Users** panel, click the **X** button next to the user you want to remove from the group. A pop-up displays asking you to confirm the action.
2. Click **Remove from group** to confirm.
    <Message type="important">
      - Removing a user from a group means that any permissions given to them via the group (i.e. from an attached policy) will no longer apply. Be sure you want to remove these permissions from the user before proceeding.
      - Due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
    </Message>


## How to manage a group's applications

From the group's [Overview page](#how-to-access-the-group-overview), scroll to the **Applications** panel. A list of all applications in the group displays.

### Add applications to a group

1. In the **Applications** panel, click **Add applications**. A pop-up displays, prompting you to select the application to add.
2. Select the application you want to add from the drop-down menu, or type the name of the application.
3. Click **Validate**. You are returned to the group's overview page, where the newly-added application now appears.

### Remove applications from a group

1. In the **Applications** panel, click the **X** button next to the application you want to remove from the group. A pop-up displays asking you to confirm the action.
2. Click **Remove from group** to confirm.
    <Message type="important">
      Removing an application from a group means that any permissions given to it via the group (i.e. from an attached policy) will no longer apply. Be sure you want to remove these permissions from the application before proceeding.
    </Message>

## How to manage a group's policies

From the groups' [Overview page](#how-to-access-the-group-overview), scroll to the **Policies** panel. A list of all policies attached to the group displays.

### Detach a policy from a group

1. In the **Policies** panel, click the **X** button next to the policy you want to detach from the group. A pop-up displays asking you to confirm the action.
2. Click **Detach policy** to confirm.
    <Message type="important">
      - Since policies can only be attached to one [principal](/iam/concepts/glossary/#principal) at a time, detaching a policy from the application means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
      - Due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
    </Message>

### Attach a policy to a group

A group may be attached to multiple policies.

1. In the **Policies** panel, click **Attach a policy** to attach a policy to the application. A pop-up displays, prompting you to select a policy.
2. Select the policy you want to attach to the application from the drop-down list, or type the name of the policy.
3. Click **Validate** to finish.
    The selected policy is attached to the group, and you are returned to the group's overview page.

<Message type="tip">
  To create a new policy, see our [dedicated how to](/iam/policies-permissions/create-policy/).
</Message>

<Message type="important">
  Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

## How to delete a group

1. From the groups's [**Overview** tab](#how-to-access-the-group-overview), scroll down to the **Delete group** panel.
2. Click **Delete group**. A warning displays, asking you to confirm your action:
3. Type **DELETE** to confirm, and click **Delete group** to validate.