Claude group
AI summary
Claude groups are RBAC and SCIM-provisioned groups from Claude Enterprise, created either manually or synced from external identity providers. Rencore Governance tracks their properties including assigned roles, organization membership, and risk scores, along with relationships to projects and connector usage.
RBACRoles and teamsRoles and teams control what each user can do and see in a Workspace. Each user is assigned a role, which grants permissions, and a team, which grants access to inventory objects.Read more and SCIM-provisioned groups of the Claude EnterpriseClaude EnterpriseClaude Enterprise is the business plan of the Claude AI assistant by Anthropic.Read more parent organization
Part of the Claude Enterprise inventory.
In Rencore Governance
Scan settings
| Default scanning interval | Allowed scanning intervals | Data removal during incremental scan |
|---|---|---|
| Daily | Daily, Weekly, Bi-Weekly, Monthly, Never, Initial | Yes |
Properties
| Property | Type | Description | Automation placeholder |
|---|---|---|---|
| Key | String | Internal. | {{ClaudeGroup. |
| Assigned Roles | String | The role ids assigned to the group. | {{ClaudeGroup. |
| Created at | DateTime | {{ClaudeGroup. | |
| Initially Scanned | DateTime | Shows when this object was initially found in a scan. | {{ClaudeGroup. |
| Description | String | {{ClaudeGroup. | |
| Display Name | String | {{ClaudeGroup. | |
| Id | String | The group identifier (rbac_group_...). | {{ClaudeGroup. |
| Last scan update | DateTime | Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. | {{ClaudeGroup. |
| Organization | Claude linked organization | The linked organization the group is scoped to, derived from the organizations that own the group's assigned roles; empty when the group has no roles and more than one organization is linked. | {{ClaudeGroup. |
| Organization Name | String | Display name of the linked organization the group is scoped to. | {{ClaudeGroup. |
| Risk Score | Int32 | Stores risk score | {{ClaudeGroup. |
| Risk Score Update | DateTime | Stores risk score update | {{ClaudeGroup. |
| Risk Score Value | String | Stores risk score value like Low_Low | {{ClaudeGroup. |
| Source | String | Whether the group was created manually in claude.ai (direct) or synced from an external identity provider (scim). Allowed values: direct, scim. | {{ClaudeGroup. |
| Updated at | DateTime | {{ClaudeGroup. |
Relations
| Relation | Connector | Description |
|---|---|---|
| Claude connector usage | Claude Enterprise | Per-connector and user usage of integrations and MCP servers in Chats, Code sessions, Cowork sessions and Claude in Office, with the read/write split and the kind of login used |
| Claude linked organization | Claude Enterprise | The organizations linked under the Claude Enterprise parent organization |
| Claude plugin usage | Claude Enterprise | Per-plugin and user installs and invocations of Claude Code and Cowork plugins, with the plugin identity and the marketplace it comes from |
| Claude project collaborator | Claude Enterprise | Active role assignments on claude.ai projects: individual users, RBAC groups, whole organizations, or all holders of an organization-level role |
| Claude user cost | Claude Enterprise | Per-user, per-product (Chat, Code, Cowork) cost with actual vs. list amount and request counts |
| Claude user | Claude Enterprise | Members of the group |
| Claude user usage | Claude Enterprise | Per-user, per-product (Chat, Code, Cowork) token consumption split by input, cache and output tokens |
Segments
This object does currently not have any segments.
Actions
This object does currently not have any actions.
Frequently asked questions
What is the Claude group object in Rencore Governance?
RBAC and SCIM-provisioned groups of the Claude Enterprise parent organization. Claude group is an object type in the Claude Enterprise inventory of Rencore Governance.
Which properties does Rencore Governance collect for Claude group?
Rencore Governance collects 15 properties for Claude group, such as Key, Assigned Roles, Created at and 12 more.
How often is Claude group scanned?
By default daily. You can change the scan interval of Claude group objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.
Which module includes the Claude Enterprise connector?
The Claude Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?