you could use

metadata_admin

or

metadata_public

to give the user a role, but that wouldn’t be grouping and would be up to your app to decide what to do with that role information

got it, i wanted to restrict the user signup for a specific company depending on the tier, for example if company A is in pro tier, only 4 users from that company can signup (they give the company id while signing up for us to identify which company they belong) and if they are in premium tier they can onboard 8 users. I was thinking how to restrict them

I think the best approach would be to keep track of the group membership outside of Kratos, and use a blocking webhook to reject the signup

that sounds better, i'll give it a try, thanks!