# Create new user in dedicated group

**URL:** <https://forum.keycloak.org/t/create-new-user-in-dedicated-group/7829>\
**Category:** Getting advice\
**Created:** [March 9, 2021, 1:29pm UTC](https://forum.keycloak.org/t/create-new-user-in-dedicated-group/7829 "2021-03-09T13:29:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![markus](https://avatars.discourse-cdn.com/v4/letter/m/b782af/32.png) [@markus](https://forum.keycloak.org/u/markus)\
**Post date:** [March 9, 2021, 1:29pm UTC](https://forum.keycloak.org/t/create-new-user-in-dedicated-group/7829/1 "2021-03-09T13:29:00Z")

</div>

Hello everyone.

I’m trying to solve a use-case where a user can manage and add only users from / to a dedicated group.

This is the setup so far:

I’ve created Group-x and group-x-admin.

A group policy has been added to group-x for group-admin with the scopes manage, manage-members, manage-membership, view-members.

This works so far that the user in group-admin can view / change only user from group-x.

Now, this configuration doesn’t allow to add a new user.

If I assign the role manage-user to the user in group-admin, or the group itself, all users from the entire realm are visible.

How can I achieve that the user can add a new user to the group and see only the group’s users?

Thank you!