# API for User Groups **URL:** \ **Category:** Product Suggestions\ **Created:** [October 20, 2025, 11:12am UTC](https://community.tulip.co/t/api-for-user-groups/15741 "2025-10-20T11:12:18Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![clark\_john\_david](https://avatars.discourse-cdn.com/v4/letter/c/35a633/32.png) [@clark\_john\_david](https://community.tulip.co/u/clark_john_david)\ **Post date:** [October 20, 2025, 11:12am UTC](https://community.tulip.co/t/api-for-user-groups/15741/1 "2025-10-20T11:12:18Z")
Hello Are there any roadmap items to expose User Groups to APIs? We are looking into locking down app entry to only execute the app if a user is part of an associated user group. It would be great if we can integrate adding and removing of people from User Groups via APIs. ---
**Author:** ![kevin.kononenko](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kevin.kononenko/32/32_2.png) [@kevin.kononenko](https://community.tulip.co/u/kevin.kononenko)\ **Post date:** [October 20, 2025, 1:01pm UTC](https://community.tulip.co/t/api-for-user-groups/15741/2 "2025-10-20T13:01:05Z")
Hello John, do you currently have User Groups connected to SAML SSO? If yes, I am wondering how you would think about the power struggle between our SAML mapping into User Groups v. updating with an API- in other words, how to determine which user group mappings to honor? ---
**Author:** ![clark\_john\_david](https://avatars.discourse-cdn.com/v4/letter/c/35a633/32.png) [@clark\_john\_david](https://community.tulip.co/u/clark_john_david)\ **Post date:** [October 20, 2025, 7:32pm UTC](https://community.tulip.co/t/api-for-user-groups/15741/3 "2025-10-20T19:32:47Z")
Hey Kevin, We do. This is where we become unstuck. We pass over one group over a SAML connection which maps the user to a role and to one group. We have an issue where Tulip currently cannot manage multiple groups coming over as one string “group1, group2, etc”. If we could do this then SAML could set the groups. If we can use an API to manage user groups then we could look at having two provisioning settings: 1. To manage the user group, passing over one group through SAML. 2. An integration with our account management solution to add users to user groups based on selected app roles.