# Attributes and Groups in Immuta

{% hint style="info" %}
**Identity access management best practice:** Organize user attributes and groups in Immuta and then transfer them to your IAM.
{% endhint %}

## Attributes

*Note: User Admins can add attributes in Immuta to external IAM groups using the Add Attributes button.*

Attributes can be added to individual users or groups and then included in [Data policies](https://documentation.immuta.com/2024.2/secure-your-data/authoring-policies-in-secure/data-policies/data-policy-overview) and [Subscription policies](https://documentation.immuta.com/2024.2/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-policies) to restrict what data users can see. They can be created by a User Admin in the Immuta UI or mapped in from an [external IAM](https://documentation.immuta.com/2024.2/section-contents/reference-guides/identity-managers#external-identity-managers).

To learn how to add attributes to a user or group, navigate to the [tutorial](https://documentation.immuta.com/2024.2/people/how-to-guides/managing-attribute-and-group#add-group-or-user-attribute).

## Groups

Individual users are added into groups, and then groups are used in [Data policies](https://documentation.immuta.com/2024.2/secure-your-data/authoring-policies-in-secure/data-policies/data-policy-overview) and [Subscription policies](https://documentation.immuta.com/2024.2/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-policies) to restrict what data users in each group can see. Groups are also used in assigning members to [projects](https://documentation.immuta.com/2024.2/secure-your-data/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/create-project-tutorial#add-users-or-groups-to-the-project). Users can belong to any number of groups and can be added or removed from groups at any time.

To learn how to create a group, navigate to the [tutorial](https://documentation.immuta.com/2024.2/people/how-to-guides/managing-attribute-and-group#create-group).