Set up SCIM for a Grok organization

Enterprise organization admins automate provisioning and deprovisioning with SCIM from console.x.ai/organization. Official guide: Organization Management → Setting up SCIM.

SCIM changes who can reach teams, ACLs, and licenses. Preview carefully before you activate.

1. Connect directory sync

1. On /organization, click Setup SCIM.
2. Follow the IdP-specific steps to connect your directory.
3. Create IdP groups that match how you want access organized (for example xai-engineering, xai-data-science).

2. Create roles

In the xAI console, click Create Role. Each role needs a name, a slug, and an optional description. Create as many as you need — there is no limit.

Drag roles to set priority. Higher-priority roles win when a user sits in multiple groups. The built-in Member role stays at the bottom as the default for users with no mapped group.

You can also create and reorder roles later from the Provisioning tab.

3. Map groups to roles

1. Click Assign Groups to open the management portal at sso.x.ai.
2. Click Configure role assignment.
3. For each IdP group, pick the matching xAI role.

4. Attach teams, permissions, and licenses

For each role, set:

• Teams — one or more console teams
• Permissions — the ACLs that role receives
• Licenses — product license to attach (for example Grok Business)

5. Preview and activate

Review the activation preview: role membership, authorization level, and licenses. When it matches intent, click Activate to make SCIM the default provisioning path.

SCIM is disruptive — people can gain or lose access immediately. Notify the org and fix mismatches in preview before you activate.

After activation

From the Provisioning tab:

• Create Role adds new roles
• Reorder Priority changes which role wins on multi-group users
• Role overflow menu updates teams, permissions, and licenses

Pitfalls

• Activating without a full preview is the usual outage path — walk the preview first.
• Multi-group users take the highest-priority mapped role; check reorder before go-live.
• Help with setup or Enterprise features: xAI sales.