> For the complete documentation index, see [llms.txt](https://docs.thousandeyes.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.thousandeyes.com/product-documentation/user-management/authorization/account-groups/what-is-an-account-group.md).

# What is an Account Group?

The account group is a feature used to divide an organization into different sections. There are many reasons to divide an organization to reflect the internal structure of an organization and provide different levels of visibility into the account resources such as tests, agents and alerts.

## Where to Find the Account Groups

The existing account groups are listed under the [Account Groups](https://app.thousandeyes.com/account-settings/users-roles?section=accountgroups) screen within **Manage > Account Settings > Users and Roles**.

To add a new account group, see [Add a New Account Group](https://docs.thousandeyes.com/product-documentation/user-management/rbac/role-based-access-control-explained#add-a-new-account-group).

![](/files/zDYD178V6DbswHSFSJXt)

The **Account Groups** screen is not visible to users without the *View all account groups settings* [permission](https://docs.thousandeyes.com/product-documentation/user-management/rbac/role-based-access-control-explained).

Each account group in the list can be expanded to view and edit its details, such as name, assigned [Enterprise Agents](https://docs.thousandeyes.com/product-documentation/global-vantage-points/enterprise-agents/) and account group token. The Enterprise Agents drop-down is used to select or view which agents are shared with the current account group.

## Account Group Token

The account group token is an alphanumeric string used to bind an [Enterprise Agent](https://docs.thousandeyes.com/product-documentation/global-vantage-points/enterprise-agents/) to a specific account group.

When installing an Enterprise Agent, you need the account group token for the desired default account group. After installation, you can share the agent with other account groups so it can run their tests.

You can retrieve the account group token from the **Account Groups** screen in **Manage > Account Settings > Users and Roles**:

1. Select the **Account Groups** tab.

   To see the **Account Groups** tab, you must have the *Organization Admin* role or a role with the *View all account groups settings* permission. For more information on roles and permissions, see [Role-Based Access, Explained](https://docs.thousandeyes.com/product-documentation/user-management/rbac/role-based-access-control-explained).
2. In the list of account groups, expand the account group whose token you need.
3. In the **Edit Account Group** dialog, select the **eye** icon to show the token.

![Edit Account Group dialog showing the account group token field and visibility icon](/files/CTdZBH3z5tgmcXDi5mWo)

You can also find the account group token on **Network & App Synthetics > Agent Settings** when you add a new Enterprise Agent. To view the token, you must have a role with the *Edit agents in account group* permission. For steps, see [Working with Agent Settings](https://docs.thousandeyes.com/product-documentation/global-vantage-points/working-with-agent-settings#account-group-token).

{% hint style="warning" %}
Keep your account group token secure, like a password. Anyone with the token can affect how your organization uses ThousandEyes resources.
{% endhint %}

## User Assignment to Account Groups

A user can belong to one or multiple account groups, and can be assigned different [roles](https://docs.thousandeyes.com/product-documentation/user-management/rbac/role-based-access-control-explained) in each of them. This is configured by expanding the specific user in the [**Users**](https://app.thousandeyes.com/account-settings/users-roles?section=users) screen in **Manage > Account Groups > Users and Roles**:

![](/files/R8zUUebjmeJoHQTHmuQn)

**NOTE**: The **Users** screen is not visible to users without the necessary [permissions](https://docs.thousandeyes.com/product-documentation/user-management/rbac/role-based-access-control-explained) - the *View all users* permission is required.

For information about switching between account groups, see [Switching Account Groups](https://docs.thousandeyes.com/product-documentation/user-management/rbac#switching-account-groups).

## Login Account Group

For users who belong to multiple account groups, you can set the account group you log into from the **Profile** screen within **Manage > Account Settings > Users and Roles**. See [Menus Reflecting New Organizations and Account Groups](https://docs.thousandeyes.com/product-documentation/user-management/account-groups/users-in-multiple-organizations#menus-reflecting-new-organizations-and-account-groups) for how to do so. Without intervention, the login account group defaults to the first organization and account group you signed up to.

{% hint style="info" %}
Some users who move from using an expired trial account to a prepaid account may find upon the switch that they cannot log in as they are locked out from their account group. This is due to the login account group being set to the expired trial account, which is now locked. You will receive an error message and a request to contact ThousandEyes Support. You must open a support case with us to get your login account group changed to the new prepaid account group.
{% endhint %}

## Related Information

* [Role-Based Access Control, Explained](https://docs.thousandeyes.com/product-documentation/user-management/rbac/role-based-access-control-explained) illustrates the role-based security model used in the ThousandEyes app.
* [Working with Agent Settings](https://docs.thousandeyes.com/product-documentation/global-vantage-points/working-with-agent-settings#account-group-token) explains how to retrieve the account group token when adding a new Enterprise Agent.