- \n
- Get Started: User Groups<\/a><\/li>\n\n\n\n
- Get Started: Device Groups<\/a><\/li>\n<\/ul>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nYou can also let new users bind their account to macOS and Windows devices directly from the login window. See Provision New Users on Device Login<\/a>. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Considerations<\/strong>:<\/p>\n\n\n\n
- \n
- The JumpCloud agent must be present on the local device to bind a user to it.<\/li>\n\n\n\n
- Only local accounts can be bound to devices.<\/li>\n\n\n\n
- The user must be connected to the system in the Admin Portal. See Connect New Users to Resources<\/a>.<\/li>\n<\/ul>\n\n\n\n
Bind a User to a Device<\/h2>\n\n\n\n
If you are binding a new user account to the device, whether it\u2019s the first account on the device or an additional account, you perform the following steps:<\/p>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to\u00a0USER MANAGEMENT <\/strong>> Users<\/strong>.<\/li>\n\n\n\n
- Select the user by clicking anywhere on the user’s row.<\/li>\n\n\n\n
- Click the Devices <\/strong>tab.<\/li>\n\n\n\n
- Click the checkbox next to each device that you want to bind the user to. <\/li>\n\n\n\n
- Click save user<\/strong>. The window below appears:
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/bind-device-to-user-modal.png\")
<\/li>\n\n\n\n- Click Bind Device<\/strong>.<\/li>\n<\/ol>\n\n\n\n
After the user is bound to the device, the user can utilize their JumpCloud credentials to log in. If your user or device needs to use multi-factor authentication (MFA), JumpCloud will prompt the user when they log in to configure MFA.
User accounts aren’t provisioned to the device until the JumpCloud agent polls with your organization\u2019s Admin Portal, which happens every few minutes.
You can connect the user to any resource in JumpCloud (devices, applications, networks, etc.). If the user is created in a Staged user state, they won’t gain access to their assigned resources until they are activated. See Manage User States<\/a> for specific information about when a user gains access.<\/p>\n\n\n\nBind a User Group to a Device Group<\/h2>\n\n\n\n
You can bind a user group to a device group to grant a group of users access to each device in the group.<\/p>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nBinding a user group to a device group will create a local user account for each user in the user group on each device in the device group. Adding a large number of user accounts to a device may prevent it from operating correctly. Proceed with caution.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To bind a user group to a device group<\/strong>:<\/p>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to\u00a0USER MANAGEMENT <\/strong>> User Groups<\/strong>.<\/li>\n\n\n\n
- Select the user group by clicking anywhere on the user group’s row.<\/li>\n\n\n\n
- Click the Device Groups <\/strong>tab.<\/li>\n\n\n\n
- Click the checkbox next to each device group to which you want to bind the user group. <\/li>\n\n\n\n
- Click save<\/strong>. The window below appears:
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/bind-device-group-to-user-group-modal.png\")
<\/li>\n\n\n\n- Click Bind Device Groups<\/strong>.<\/li>\n<\/ol>\n\n\n\n
Take Over an Existing Account<\/h2>\n\n\n\n
If your device already has a local user account, JumpCloud can manage, or take over, that account. If the JumpCloud user name and the existing account\u2019s username match exactly, JumpCloud will take over that existing account. If they do not, you can specify the account for JumpCloud to manage. For more information, Take Over an Existing User Account with JumpCloud<\/a>.<\/p>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nAs this process is writing the user\u2019s password through Mac Keychain and the Windows Data Protection APIs, users will be logged out of all resources after account takeover. This is expected behavior. Some examples of these resources include 1Password, Dropbox, Google Drive, Slack, Microsoft Office, Google Workspace, Microsoft Teams, Chrome, Firefox, Edge browsers, etc.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
<\/p><\/div>Warning:<\/strong> \nFor macOS takeovers, users must log out and log back in to their system after they are connected to the system via JumpCloud. See MacOS Account Takeover Considerations<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Unbind a User from a Device<\/h2>\n\n\n\n
If you no longer want a user to have access to a device, you can unbind that user from the device. For more information, see Unbind Users from a Resource<\/a>.
Considerations<\/strong>: <\/p>\n\n\n\n- \n
- MacOS<\/strong>: The macOS agent will not allow suspension or deletion of all Secure Token users from a system. If a user suspended or deleted via the Admin Portal is the last Secure Token user on a system, this user will be suspended or deleted in the Admin Portal but will not<\/strong> be removed from the target system to prevent that system from being rendered inaccessible.<\/li>\n<\/ul>\n\n\n\n<\/p><\/div>Warning:<\/strong> \n
Use caution when unbinding users from devices. If the device has no user accounts on it, the device can become locked and will no longer be able to be accessed by JumpCloud. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To unbind users from a device<\/strong>:<\/p>\n\n\n\n
- Go to\u00a0USER MANAGEMENT <\/strong>> User Groups<\/strong>.<\/li>\n\n\n\n
- Go to\u00a0USER MANAGEMENT <\/strong>> Users<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Get Started: Device Groups<\/a><\/li>\n<\/ul>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/unbind-device-from-user-modal.png\")
<\/li>\n\n\n\n![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/02\/unbind-device-group-from-user-group-modal.png\")
<\/li>\n\n\n\n