SCIM group mapping

When WorkOS Directory Sync adds a user to one of your IdP groups, we look up the group ID here to decide what OrgRole to elevate them to. Groups not in this list use the default role (operator).

No mappings yet.

Group IDs come from WorkOS — find them under Directory Sync → your directory → Groups. IDs start with directory_group_. Elevation is additive-only: adding someone to an admin- mapped group promotes them; removing them from it demotes back to operator. Manual promotions via the members page are preserved.