In addition to creating environments, you can also create groups of environments.
This feature lets you group environments into logical categories, making it easier to manage your company or customers as a Managed Security Service Provider (MSSP).
Using environment groups to support use cases
MSSPs, government entities, and enterprises with multiple sub-organizations can all benefit from using environment groups. These use cases include:
MSSP service-level groups: differentiating service based on customer tiers (for example, Gold, Silver).
Government sectors: customizing security solutions for specific industries (for example, communication, transportation).
Enterprise sub-organizations: managing security for individual sub-organizations within a larger entity (for example, Sub Org 1, Sub Org 2).
Supported modules for environment groups
The following modules support environment groups:
Settings: Creating environment groups speeds up user onboarding of new users and simplifies adding new environments to existing groups.
Playbooks or blocks: Environment groups streamline the creation of playbooks, letting you adjust the scope of your playbooks by grouping environments together. Playbooks automatically update the scope when the environment groups are modified.
Case filters: Environment groups can also be used within case filters for more targeted and efficient issue resolution.
Limitations
The following modules don't support environment groups as a filter:
SOAR Search: When searching for cases, you can't filter by
environment groups. You must manually select individual environments.
SOAR Reports: When creating reports, environment groups aren't
available as a filter. You must select individual environments to define the
report scope.
Create an environment group
To create an environment group:
Go to SOAR Settings > Organization > Environments.
Click the Groups tab.
Click
add
Add.
Enter the environment group name and description.
Add as many environments to the group
as required.
The created environment groups are dynamic and can be modified. To do this, select Manage Groups and edit existing groups, as needed.
Delete environment groups
Deleting an environment group doesn't delete its associated environments.
However, if the deleted environment group is the only one associated with a playbook, the playbook is also deleted.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eEnvironment groups allow for the categorization of environments into logical groups, beneficial for MSSPs and large organizations.\u003c/p\u003e\n"],["\u003cp\u003eEnvironment groups are supported within the Settings, Playbooks, and Case filters modules, enhancing user onboarding, playbook creation, and issue resolution.\u003c/p\u003e\n"],["\u003cp\u003eCreating an environment group involves navigating to SOAR Settings, adding a group name, description, and selecting the environments to add.\u003c/p\u003e\n"],["\u003cp\u003eEnvironment groups are dynamic and can be modified by using the Manage Groups feature in SOAR settings.\u003c/p\u003e\n"],["\u003cp\u003eDeleting an environment group will not delete its associated environments, but will delete a playbook that is only associated with that deleted group.\u003c/p\u003e\n"]]],[],null,["# Create environment groups\n=========================\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \nIn addition to creating environments, you can also create groups of environments.\nThis feature lets you group environments into logical categories, making it easier to manage your company or customers as a Managed Security Service Provider (MSSP).\n\n### Using environment groups to support use cases\n\n\nMSSPs, government entities, and enterprises with multiple sub-organizations can all benefit from using environment groups. These use cases include:\n\n- **MSSP service-level groups**: differentiating service based on customer tiers (for example, Gold, Silver).\n- **Government sectors**: customizing security solutions for specific industries (for example, communication, transportation).\n- **Enterprise sub-organizations**: managing security for individual sub-organizations within a larger entity (for example, Sub Org 1, Sub Org 2).\n\nSupported modules for environment groups\n----------------------------------------\n\nThe following modules support environment groups:\n\n- [**Settings**](/chronicle/docs/soar/admin-tasks/environments/add-a-new-environment): Creating environment groups speeds up user onboarding of new users and simplifies adding new environments to existing groups.\n- [**Playbooks or blocks**](/chronicle/docs/soar/respond/working-with-playbooks/whats-on-the-playbooks-screen): Environment groups streamline the creation of playbooks, letting you adjust the scope of your playbooks by grouping environments together. Playbooks automatically update the scope when the environment groups are modified.\n- [**Case filters**](/chronicle/docs/soar/investigate/working-with-cases/apply-and-save-filters): Environment groups can also be used within case filters for more targeted and efficient issue resolution.\n\nLimitations\n-----------\n\n\nThe following modules don't support environment groups as a filter:\n\n- **SOAR Search**: When searching for cases, you can't filter by environment groups. You must manually select individual environments.\n- **SOAR Reports**: When creating reports, environment groups aren't available as a filter. You must select individual environments to define the report scope.\n\nCreate an environment group\n---------------------------\n\nTo create an environment group:\n\n1. Go to **SOAR Settings \\\u003e Organization \\\u003e Environments.**\n2. Click the **Groups** tab.\n3. Click add **Add**.\n4. Enter the environment group name and description.\n5. Add as many environments to the group as required.\n\n\nThe created environment groups are dynamic and can be modified. To do this, select **Manage Groups** and edit existing groups, as needed.\n\nDelete environment groups\n-------------------------\n\nDeleting an environment group doesn't delete its associated environments.\nHowever, if the deleted environment group is the only one associated with a playbook, the playbook is also deleted.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
