---
title: "ezgh sso assignments"
description: "Assignments: which users and groups may sign in to an application."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh sso assignments

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh sso assignments <command>
```

Assignments say which directory users and groups may sign in to an application, and whose tiles the portal shows. They're the directory's decision, not IAM's: a policy never grants sign-in to an application. For an ezgh application they only decide who sees its tile. Assignments are checked at every sign-in, token refresh and userinfo request.

Part of [`ezgh sso`](/cli/reference/sso).

## Flags

This command also takes the [global flags](/cli/reference#global-flags).

## Subcommands

| Command | Description |
| --- | --- |
| [`ezgh sso assignments add`](/cli/reference/sso-assignments-add) | Assign users or groups to an application, leaving the others alone |
| [`ezgh sso assignments list`](/cli/reference/sso-assignments-list) | List the users and groups assigned to an application |
| [`ezgh sso assignments remove`](/cli/reference/sso-assignments-remove) | Unassign users or groups from an application, leaving the others alone |
| [`ezgh sso assignments set`](/cli/reference/sso-assignments-set) | Replace an application's whole assignment list |

Source: https://docs.ezghcloud.com/cli/reference/sso-assignments/index.mdx