List All Groups
Returns a list of all groups in your network.Filter groups by name (exact match)
Unique group identifier
Group name
Number of peers in this group
Number of resources in this group
How the group was created:
api, integration, or jwtList of peer objects in the group
List of resource objects in the group
Get a Group
Retrieve detailed information about a specific group.The unique identifier of the group
Example
Create a Group
Create a new group with specified peers and resources.Group name identifier
List of peer IDs to add to the group
List of resource objects to add to the group
Update a Group
Update group name, peers, or resources.The unique identifier of the group
Group name identifier
Complete list of peer IDs (replaces existing peers)
Complete list of resource objects (replaces existing resources)
Delete a Group
Remove a group from the network.The unique identifier of the group
Example
Deleting a group will:
- Remove the group from all policies
- Remove the group from all routes
- Remove the group from user auto-groups
- NOT delete the peers or resources in the group
Group Types
Groups can be created through different methods:API Groups
Created and managed via the API or dashboard
Integration Groups
Automatically synced from identity providers (Okta, Azure AD, etc.)
JWT Groups
Extracted from JWT claims during user authentication
Common Use Cases
Organizing by Department
Create groups for different teams:Organizing by Environment
Separate production, staging, and development:Organizing by Location
Group peers by geographic location:Resource Types
Groups can contain different resource types:Resource type:
peer, host, subnet, or domainUnique resource identifier
Example Resources
Best Practices
Use descriptive names - Name groups based on their purpose (e.g., “engineering-laptops”, “production-databases”)
Keep groups focused - Create smaller, specific groups rather than large, generic ones
Document group purpose - Maintain documentation on what each group represents
Regular audits - Periodically review group memberships to ensure accuracy
Use integration groups - Leverage identity provider groups when possible for automatic synchronization