# Attributes and Groups in Immuta

{% hint style="info" %}
**Identity access management best practice:** Organize user attributes and groups in Immuta and then transfer them to your IAM.
{% endhint %}

## Attributes

*Note: User Admins can add attributes in Immuta to external IAM groups using the Add Attributes button.*

Attributes can be added to individual users or groups and then included in [Data policies](/2024.3/secure-your-data/authoring-policies-in-secure/data-policies/data-policy-overview.md) and [Subscription policies](/2024.3/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-policies.md) to restrict what data users can see. They can be created by a User Admin in the Immuta UI or mapped in from an [external IAM](/2024.3/people/section-contents/reference-guides/identity-managers.md#external-identity-managers).

To learn how to add attributes to a user or group, navigate to the [tutorial](/2024.3/people/immuta-users/how-to-guides/managing-attribute-and-group.md#add-group-or-user-attribute).

## Groups

Individual users are added into groups, and then groups are used in [Data policies](/2024.3/secure-your-data/authoring-policies-in-secure/data-policies/data-policy-overview.md) and [Subscription policies](/2024.3/secure-your-data/authoring-policies-in-secure/section-contents/reference-guides/subscription-policies.md) to restrict what data users in each group can see. Groups are also used in assigning members to [projects](/2024.3/secure-your-data/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/create-project-tutorial.md#add-users-or-groups-to-the-project). Users can belong to any number of groups and can be added or removed from groups at any time.

To learn how to create a group, navigate to the [tutorial](/2024.3/people/immuta-users/how-to-guides/managing-attribute-and-group.md#create-group).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.immuta.com/2024.3/people/immuta-users/reference-guides/attribute-and-group-overview.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.