You cannot create user group itself manually. You can do user group provisioning by integrating with IDaaS such as Okta or AD Importer. 

After importing user groups to the Netskope tenant via AD importer or other IDP solutions like Okta, you can create client configurations for specific user groups. 

Thank you @madhurasridhar @ejang 
This is so inconvenience way...

I spoke to our CSM about this feature request yesterday. Having the ability to create host or user groups within the platform would be such a great feature!

Thank you,

It should be very simple to implement this feature. I wonder why Netskope choose not to do it so far.

@eldad there are API’s available, to use SCIM to allow the manual creation of groups and users.

This is not technically true.

You cannot create a group manually via the UI, you can however create groups via the SCIM V2 API endpoint. I have done it for testing when I didn’t want to create a group in the IDP.

A caveat though:
You would also have to create the users via the API or have existing users synced via SCIM.

From my previous testing, this wouldn’t work with users who were created via the email invite option in the UI.

We create groups adhoc all the time using SCIM. Just grab the PostMan templates for Netskope SCIM and go to town. You can also do it directly on the swagger.

Make sure you get the flag enabled to view group memberships via the API if you plan to manage users and groups manually via the SCIM API.

Alternatively, you can use an open source IDP such as Authentik that supports SCIM provisioning to manager users and groups via SCIM. I’ve configured it in the past to work with Netskope and it worked quite well.