User groups for RBAC-enabled workspaces

User groups are now available for any workspace with RBAC enabled.

Groups can be created manually in the dashboard or synced from your identity provider through our SCIM integration. A group can be assigned environment roles across multiple environments, and those roles apply to every member of the group.

When a member has roles from multiple sources — individual assignments, groups, or Owner/Manager overrides — the most permissive role prevails.