Groups and group spend limits are available for Enterprise plan organizations. Owners and Primary Owners can manage groups in Organization settings > Groups and group spend limits in Organization settings > Usage.
What are groups?
Groups let you organize members into logical collections — by team, department, or any other grouping that fits your organization. Once groups are set up, you can:
Set spend limits for groups, so all members of a group share a per-user spend limit.
Control member access through group memberships and custom roles, so their capabilities and permissions are determined entirely by the groups they belong to. For additional details, see Manage custom roles on Enterprise plans.
Groups can be created manually or synced automatically from your identity provider via SCIM. Each organization can have up to 100 groups.
In addition to spend limits, Enterprise admins can use groups to control plugin access in Cowork. Each plugin in your organization's marketplace can have group-level overrides that determine whether it's available, pre-installed, required, or hidden for members of a specific group. For details, see Manage Cowork plugins for your organization.
Create a group
Navigate to Organization settings > Groups.
Click the "Add group" button.
Enter a name for the group in the Create a group modal.
Select which custom roles to assign to this group (optional).
Search for and add members to the group.
Click "Add group” and your group will appear in the list..
Note: If SCIM directory sync is enabled, you’ll see a “SCIM Sync” button next to "Add group." Clicking this will manually refresh groups from your identity provider.
Edit a group
Click any group in the list to open its edit form. You can change the name, update custom role assignments, and add or remove members.
Note: Groups synced from your identity provider via SCIM can't be renamed or deleted in Claude, and their members are managed in your identity provider.
Delete a group
Click the menu button to the right of any group and select "Delete." Deleting a group doesn't affect the custom roles that were assigned to it and doesn't remove any members from your organization.
SCIM group sync
If your organization uses SCIM directory sync, groups from your identity provider are automatically synced to Claude. SCIM groups appear with a sync indicator in the groups list.
SCIM groups support custom role assignments and spend limits the same way as manually created groups.
To manually trigger a sync, click “SCIM Sync."
Control member access with custom roles
You can control individual members' feature access entirely through groups and custom roles. When a member's role is set to Custom roles, they have no default capabilities or permissions beyond chat—their access is determined entirely by the custom roles assigned to their groups. This is different from the User, Admin, or Owner roles, which include built-in permissions.
Set a member's role to Custom roles
Navigate to Organization settings > Organization.
Find the member and click their role dropdown.
Select "Custom roles."
Only Owners and Primary Owners can change member roles. You can also assign “Custom roles” at scale by mapping an IdP group using group mappings.
Recommended setup
Create custom roles with the desired permissions in Organization settings > Custom roles. For details, see Manage custom roles on Enterprise plans.
Create groups in Organization settings > Groups (or sync them from your identity provider).
Assign custom roles to groups.
Add members to the appropriate groups.
Note: If a member set to Custom roles isn't in any groups, or their groups have no custom roles assigned, they have no permissions and can't access any features beyond chat.
Set each member's organization role to Custom roles.
Enable any features at the organization level that you want to control per-group.
The member's effective permissions are now determined by their group memberships and the custom roles assigned to those groups.
Important: Always complete steps 1–5 before enabling features at the organization level (step 6). If you enable a feature before changing members' roles to Custom roles and assigning appropriate custom roles, there's a brief window where some members could access the feature through their previous role. For a detailed walkthrough, see Set up role-based entitlements on Enterprise plans.
Inviting new members
When inviting a new member, Owners and Primary Owners can select "Custom roles" as the role. The new member's access is determined by their group memberships after they join.
Group spend limits
Group spend limits let you control spending across your organization by assigning per-user monthly spend limits to groups. Instead of setting spend limits for each member individually, you can set a limit on a group and have it apply to every member of that group.
Group spend limits work alongside individual spend limits. If a member has an individual spend limit set, their individual limit takes precedence over any group limit.
Set a group spend limit
Navigate to Organization settings > Usage.
Select the “By group” tab.
Find the group and click the menu button to the right, then “Edit limit”
Select “Unlimited,” or “Set dollar amount” and enter a dollar amount for the spend limit.
Click "Set limit."
The spend limit applies to all members of the group. Members who also have an individual spend limit set are governed by their individual limit instead.
How spend limits are resolved
When determining a member's effective spend limit, the system evaluates in this order:
Individual limit—if the member has an individual spend limit set, that limit applies regardless of group membership.
Group limit—if the member has no individual limit, the system checks their group memberships. If the member belongs to multiple groups with spend limits, the lowest (most restrictive) limit applies.
This lets you set a broad spend limit on a larger group and then create subgroups with lower limits for teams that need tighter budget controls.
No limit—if the member has no individual limit and belongs to no groups with spend limits, no spend limit is applied.