---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Create an identity group

# Create an identity group {#ariaid-title1}

Release version: Brazil  
Updated September 18, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Create a custom identity group to manage access for a specific set of members.

## Before you begin

Role required: admin or cryptographic_manager  
Note:  
The system-managed mid-all identity group is automatically available for all MID Servers. Create a custom identity group only if you want to restrict access to a specific subset of members.

## Procedure

1. Navigate to All, type sys_secret_identity_group.list into the search box and select Enter.  
   Note:  
   The identity group that is included in the base system is mid-all.
2. Select New.
3. Fill out the fields as shown in the following table.  
   {#usg-create-identity-group__entry__2}

   | Field | Value |
   |-|-|
   | Name | Enter a descriptive name for this identity group. Example: prod-mid-servers or integration-services |
   | Managed By | Select manual if you're manually adding members to this group, or system if the group is automatically populated by USG. |
   [ ]

4. Select Submit.

## What to do next

Create consumer grants to link your identity group to the alias group you created. See [Create consumer grants](https://www.servicenow.com/docs/~XUmvSnOG2L75prWufxbaQ "Create consumer grants to specify which identity groups can access which alias groups.").