# AD Group Management

As we analyzed earlier, there are various roles when interacting with RPA Connect, each with specific characteristics and functionalities. From Microsoft Entra ID, it is possible to create new groups with their respective permissions. Let's take a look at them:

* **Developers:** These are the users who have access to the ***Build*** application (<https://app.rpaconnect.io/build>) and are responsible for creating and editing forms. They can design new templates and, depending on their permissions, manage form instances. **This role corresponds to the permission \_Manage form definitions**\_**.**
* **Administrators:** These users have access to the ***Admin*** application (<https://app.rpaconnect.io/admin>) and can manage user onboarding and offboarding, group configurations, role and permission assignments, as well as access to forms and workspaces. **This role corresponds to the permission \_Manage Admin settings**\_**.**
* **Connect Users:** These are users who can be assigned forms defined as ***Connect Only*** and can access the Portal (<https://app.rpaconnect.io/portal>) to view them. **This role corresponds to the permission \_Connect user**\_**.**

To create a new group from Microsoft Entra ID, navigate to ***Enterprise applications > RPA Connect > Users and Groups*** and click ***Add user/group***.

<figure><img src="https://1817123835-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6gW1YnQoR7lwDfSXSQR9%2Fuploads%2Fgit-blob-c48c5d619e3f3ad6dfb2fcf25ce2ef02581ef7de%2Frpa_entra_id_2.png?alt=media" alt=""><figcaption><p>Creating a group in Microsoft Entra ID</p></figcaption></figure>

Next, select the user or group and their corresponding permissions. Click ***OK*** to confirm the process.\
Try creating a group for users responsible for generating new forms, which we will call "Developers." Assign the permission ***Manage form definitions*** to this group.

When a new group is created, a specific ID will be generated for it, which can be copied and used to manage this group on the RPA Connect platform.

<figure><img src="https://1817123835-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6gW1YnQoR7lwDfSXSQR9%2Fuploads%2Fgit-blob-dc339db7b27119a41c4eeb3ab49c3730a33041fb%2Frpa_entra_id_3.png?alt=media" alt=""><figcaption><p>Group ID</p></figcaption></figure>

Copy the ID corresponding to the group you created and go to the ***Admin App***. Navigate to ***Users And Groups > Groups*** and click on ***New Group***.

Fill in the defined name and role, and toggle the ***AAD Integration*** switch. A new field will appear where you can paste the corresponding ID.

<figure><img src="https://1817123835-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6gW1YnQoR7lwDfSXSQR9%2Fuploads%2Fgit-blob-cd4a3189913c30d92238c998bdc5d1b789d45f7d%2Frpa_entra_id_4.png?alt=media" alt=""><figcaption><p>AAD Integration</p></figcaption></figure>

This will import the group created in Microsoft Entra ID and activate the connection.