> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server. # User groups in OneID > User groups in OneID manage access permissions, enhance security, and streamline administrative tasks by organizing Zuora tenants and user roles. User groups in OneID manage access permissions, enhance security, and streamline administrative tasks by organizing Zuora tenants and user roles. A OneID user group contains a group of Zuora tenants and the corresponding OneID user roles. You can add a user to one or multiple user groups. The first group a user is added to has the highest priority by default. The administrator can adjust the priority manually. If a specific tenant is defined in multiple groups which contain the same user, the user inherits user roles and permissions from the highest-priority group. If a specific tenant is not defined in the highest-priority group, but defined in a user group with a lower priority, the user inherits user roles and permissions from the lower-priority group. Zuora OneID provides an efficient way to manage access permissions, enhance security, and streamline administrative tasks through user groups. Permissions are assigned to groups rather than individual users, allowing dynamic updates to access permissions by adding or removing users from a group. Dynamic updates to access permissions occur when users are added or removed from a security group, ensuring consistency and reducing the risk of human error. Uniform security policies are enforced across user groups, facilitating compliance audits and ensuring adherence to organizational security policies. User groups simplify the management of user accounts throughout their lifecycle, allowing administrators to globally apply changes and ensure consistent security policies across the organization. * **Billing Manager / Billing Operations Specialist** - Oversees the billing processes, ensuring accuracy, timeliness, and efficiency in invoicing customers. * **Subscription Manager** - Manages the subscription lifecycle, including customer acquisition, retention, and upgrades. * **Revenue Operations Manager** - Focuses on optimizing revenue-related processes, aligning sales and marketing efforts, and ensuring accurate financial reporting. * **Billing Analyst -** Analyzes billing data, identifies trends, and provides insights to improve billing processes. * **Subscription Analyst -** Analyzes subscription data, monitors customer behavior, and recommends strategies for improving subscription metrics. * **Revenue Analyst -** Examines revenue streams, analyzes financial data, and provides insights to optimize revenue generation. * **Billing Specialist -** Handles day-to-day billing tasks, resolves customer billing inquiries, and ensures billing accuracy. The following table shows two examples of user groups and subordinate user roles:
OneID user group OneID user role User group priority
Group 1: Billing Manager * Billing Manager Role for Prod Tenant 1
Group 2: Billing User * Billing User Role for Prod Tenant * Billing User Role for SBX Tenant 2
In this example, if a user is added to both Group 1 and Group 2 (Group 1 has a higher priority), this user gets the following user roles: * Billing Manager Role for Prod Tenant Because both groups contain a user role for Prod Tenant, the user inherits this user role from a higher-priority group (Group 1). * Billing User Role for SBX Tenant Because only Group 2 contains a user role for SBX Tenant, the user inherits this user role from a lower-priority user group (Group 2). > User groups in OneID manage access permissions, enhance security, and streamline administrative tasks by organizing Zuora tenants and user roles. ## Docs - [Users and user group provisioning in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/manage-user-and-group-provisioning-in-oneid.md): Learn how to provision users and user groups in OneID, including managing access through user groups or direct tenant access for optimized security and administrative efficiency. - [Switch from Direct Tenant Access to Group Provisioning in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/manage-user-and-group-provisioning-in-oneid/switch-from-direct-tenant-access-to-group-provisioning-in-oneid.md): Learn how to switch from Direct Tenant Access to Group Provisioning in OneID by following specific steps for user-level and organization-wide transitions. - [Add user groups in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/add-user-groups.md): Learn how to add user groups in OneID by navigating the Admin Console, specifying group details, setting permissions, and optionally adding users. - [View user groups](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/view-user-groups.md): Learn how to view user group information, including group names, tenants, and user roles, in OneID. - [Edit user groups in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/edit-user-groups.md): Edit user groups in OneID by navigating to the Admin Console, updating group information, setting permissions, and adding users. - [User and user group relationships](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/add-users-to-user-groups.md): This reference explains the many-to-many relationship between users and user groups in OneID, detailing methods for adding users to groups and managing these associations. - [User provisioning via direct tenant assignment](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/manage-user-provisioning-by-directly-assigning-tenants-to-individual-users.md): User provisioning can be managed by assigning tenant access directly to users or through user groups for bulk provisioning. - [Assign tenants from the Users page](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/manage-user-provisioning-by-directly-assigning-tenants-to-individual-users/assign-tenants-from-the-users-page.md): Learn how to assign tenants from the Users page by navigating through the Admin Console and adjusting user permissions. - [View tenant details and roles](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/manage-user-provisioning-by-directly-assigning-tenants-to-individual-users/view-tenant-details-and-roles.md): Learn how to view tenant details and roles in the Admin Console. - [Migrating existing user accounts from individual tenants to OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/migrate-existing-user-accounts-from-individual-tenants-to-oneid.md): Migrate local user accounts to OneID for streamlined access across multiple tenants, preserving roles and permissions. - [Migrate user accounts](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/migrate-existing-user-accounts-from-individual-tenants-to-oneid/user-account-migration.md): Learn how to migrate local user accounts to global status in OneID, enabling seamless tenant access. - [FAQs on self service migration of local user accounts to OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/user-groups-in-oneid/migrate-existing-user-accounts-from-individual-tenants-to-oneid/faqs-on-self-service-migration-of-local-user-accounts-to-oneid.md): This document provides answers to common questions about migrating local user accounts to Zuora OneID, including the process, requirements, and limitations.