# Manage Attributes and Groups

## Create group

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Groups**.
2. Click the **New Group** button.
3. In the modal, enter the new group's name. *You can opt to enter a **description** of and **email address** for the new group.*
4. Click **Save**.

## Add user to group

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Groups**.
2. Select the group you want to edit and select the **Settings** tab.
3. Click the **Add Members** button.
4. Begin typing in the **Search by Member Name or Email** text box.
5. Click on the **name** from the dropdown list to add this user to the group.

## Add group or user attribute

{% hint style="info" %}
**Authentication best practice**: Use an [external IAM](https://documentation.immuta.com/SaaS/configuration/people/section-contents/reference-guides/index) for authentication and Immuta's internal IAM to manage attributes.
{% endhint %}

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Groups** or **Users**.
2. Select the group or user you want to edit and select the **Settings** tab.
3. Click **Add Attributes**.
4. Begin typing the attribute name in the **Attribute** text box.
   * If the attribute already exists, select it from the dropdown list.
   * If the attribute does not exist yet, enter the full name of the attribute, and then select it from the dropdown.
5. In the **Attribute Value** text box, enter a value.
   * If the value already exists, select it from the dropdown list.
   * If the value does not exist, enter the full name, and then select it from the dropdown.
6. Click **Close**.

## Remove a user from a group

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Groups**.
2. Select the group you want to edit and select the **Settings** tab.
3. In the members section, click **Remove** in the **Action** column for the member you want to remove.
4. Click **Delete** to confirm.

## Delete a group

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Groups**.
2. Select the group you want to edit.
3. Click the **more actions** icon, and select **Delete**.
4. Click **Delete** to confirm.

## Remove a user or group's attribute

1. Click <i class="fa-users">:users:</i> **Identities** in the navigation menu and select **Users** or **Groups**.
2. Select the user or group you want to edit and select the **Settings** tab.
3. In the **Attributes** section, click the **more actions** icon on the attribute value you want to remove.
4. Click **Remove** and **Confirm**.