Manage groups
Last updated November 19th, 2025
A group can be comprised of users or devices. To view and manage your groups, navigate to the Groups page.
Here, you can view all of your groups, sort them by name, and filter them by group type. You can also select groups and click ACTIONS to perform actions on those groups, such as assign apps and profiles, edit groups, duplicate groups, and delete groups.

Create a new manual group
A manual group is a static group where members are added manually by an admin.
To create a manual group:
-
Go to Groups.
-
Click CREATE GROUP. The Create group page opens.

-
Enter the Group name of your new group.
-
Choose if your group holds users or devices.
-
Choose Manual under Membership type, then click NEXT.
-
Select one or more users or devices to add to the new group.
-
Click CREATE.
Your new group displays in the group list, where the GROUP TYPE column indicates both the group type and the membership type.
Create a new dynamic group
A dynamic group is a group where members are automatically added or removed based on pre-set criteria. You can add up to 100 members in a single dynamic group.
To create a dynamic group:
-
Go to Groups.
-
Click CREATE GROUP. The Create group page opens.
-
Enter the Group name of your new group.
-
Choose if your group holds users or devices.
-
Choose Dynamic under Membership type.
-
Click ADD CONDITION to define a new condition. You must define at least one, and up to five, conditions.

You can click Change to syntax mode to define as many conditions as you’d like using MVFLEX Expression Language (MVEL), up to 1000 characters. Click Learn more about defining conditions to view a summary of syntax rules on the page. To see an in-depth guide on using MVEL in Knox Manage, see Set dynamic group syntax.
-
In the Group settings section, you can select to push the group’s assigned profiles and apps to a newly-added user or device. You can also select to unassign a group’s profiles and apps when a user or device is removed.
- You can click PREVIEW GROUP MEMBERS or PREVIEW DEVICES to test if selected users or devices will be added into the group. Select up to 25 users or devices, then click VERIFY.
-
Click CREATE. A dialog with a progress bar displays. Click SHOW ALL NOTIFICATIONS to see details of the group creation process, or CANCEL CREATING GROUP to cancel during the creation process.
When the group has been successfully created, a confirmation dialog displays where you can take various actions, such as assigning a profile or app.
Add users to an existing user group
There are three ways to add users to an existing user group, depending on the group type:
Add users to an existing manual user group through the Users page
-
Go to Users.
-
Select one or more users to add to the group.
-
Click ACTIONS > Add to group to open the Add to group page.
-
Select the manual group to add users to.
-
Click ADD TO GROUP. The new users are added to the manual user group.

Add users to an existing manual user group through the Groups page
-
Go to Groups.
-
Select the manual group you want to add users to.
To add users, you can only select one group at a time.
-
Click ACTIONS > Edit group to open the Edit group page.
-
Select one or more users to add to the group.
-
Click SAVE. The new users are added to the manual user group.

Add users to an existing dynamic group through the Groups page
- Select a dynamic user group from the groups list.
- Click ACTIONS > Edit group.
- Click ADD CONDITION and specify a new condition in simple mode, or specify a new condition in MVEL in syntax mode.
- You can click PREVIEW GROUP MEMBERS to test if selected users will be added into the group. Select up to 25 users, then click VERIFY.
- Click SAVE. The new users are added to the dynamic user group.
Add devices to an existing device group
There are two ways to add devices to an existing device group, depending on the group type:
Add devices to an existing manual device group through the Groups page
-
Go to Groups.
-
Select the manual group you want to add devices to.
To add devices, you can only select one group at a time.
-
Click ACTIONS > Edit group to open the Edit group page.

-
Select one or more devices to add to the group.
-
Click SAVE. The new devices are added to the manual device group.
Add devices to an existing dynamic group through the Groups page
- Select a dynamic device group from the groups list.
- Click ACTIONS > Edit group.
- Click ADD CONDITION and specify a new condition in simple mode, or specify a new condition in MVEL in syntax mode.
- You can click PREVIEW DEVICES to test if selected devices will be added into the group. Select up to 25 devices, then click VERIFY.
- Click SAVE. The new devices are added to the dynamic device group.
Add user groups from a directory
You can add a group from active directories or identity providers connected to Knox Manage.
- Go to Groups.
- Click ACTIONS.
- Select Add group from directory.
- On the top left dropdown, choose which directory to get groups from. Then, select a group from that directory to add to Knox Manage.
- Click ADD USERS.
Edit a directory type group
You can edit a directory type group to change the group name and manage directory settings.
-
Go to Groups.
-
Select the checkbox for the directory type group that you’d like to edit. Then click ACTIONS > Edit group.
Alternatively, click the name of the directory type group that you want to edit. On the sliding details panel that displays, click EDIT GROUP.
-
Edit the details as required.
-
Click SAVE.
Duplicate a group
When you duplicate a group, you can choose which configurations to copy to the new group.
To duplicate a group:
-
Go to Groups.
-
Click ACTIONS > Duplicate group
-
Select the information that you want to copy to the duplicate group. If you’re duplicating a dynamic group, you can also change the group type if the duplicated group.
-
Click NEXT. The Create group page opens.

- Click CREATE if you’re duplicating a manual group, or CREATE AND EDIT CONDITIONS if you’re duplicating a dynamic group.
Edit apps assigned to a group
Once you have assigned apps to a group, you can edit multiple assigned apps. Click the corresponding link under the ASSIGNED APPS column, selecting the intended apps, then click Edit app settings and proceed to make changes as required.

Delete a group
When you delete a group, any assigned apps or profiles are removed from the users’ devices, but the users themselves remain active.
To delete a group:
- Go to Groups.
- Select one or more groups to delete.
- Click ACTIONS > Delete group(s).
- You can also delete groups by clicking the group name to open the sliding panel, then clicking on the bottom right, and then Delete group.

On this page
Is this page helpful?