What Is an Account Group?
The account group is a feature used to divide an organization into different sections. There are many reasons to divide an organization to reflect the internal structure of an organization and provide different levels of visibility into the account resources such as tests, agents and alerts.
Where to Find the Account Groups
The existing account groups are listed under the Account Groups tab of the Account Settings page.
To add a new Account Group, refer to the instructions [here](https://docs.thousandeyes.com/product-documentation/user-management/rbac/role-based-access-control-explained#add-a-new-account-group).
The Account Groups tab is not visible to users without the View all account groups settings permission.
Each account group in the list can be expanded to view and edit its details, such as name, assigned Enterprise Agents and Account Group Token. The Enterprise Agents drop-down is used to select or view which agents are shared with the current account group.
During installation of an Enterprise Agent, an Account Group Token needs to be provided. The token binds the new agent to its default account group. The new agent can then be shared with other account groups, which in turn allows it to run tests belonging to those Account Groups.
User Assignment to Account Groups
A user can belong to one or multiple account groups, and can be assigned different roles in each of them. This is configured by expanding the specific user in the Users tab:
NOTE: The Users tab is not visible to users without the necessary permissions - the View all users permission is required.
Switching Between Account Groups
When a user belongs to multiple account groups, each account group can be accessed using the Current Account Group selector under the users icon (1):
The Current Account Group drop-down menu lists and provides switching between all account groups available to the user.
Login Account Group
For users who belong to multiple account groups, you can set the account group you log into from the Profile tab within Account Settings > Users and Roles. See Menus Reflecting New Organizations and Account Groups for how to do so. Without intervention, the login account group defaults to the first organization and account group you signed up to.
Some users who move from using an expired trial account to a prepaid account may find upon the switch that they cannot log in as they are locked out from their account group. This is due to the login account group being set to the expired trial account, which is now locked. You will receive an error message and a request to contact ThousandEyes Support. You must open a support case with us to get your login account group changed to the new prepaid account group.
Related Information
Role-Based Access Control, Explained illustrates the role-based security model used in the ThousandEyes app.
Where Can I Get the Account Group Token? explains where to retrieve the token used to bind Enterprise Agents to the specific account group.
Last updated
