# Account Identity Visibility Filter

An account-level rule that controls which identity provider groups are discoverable in directory
 search and group pickers when automatic identity management is enabled. Filters apply across all
 workspaces in the account.

 If no group filters are configured, all groups are visible. Otherwise, a group is visible if it
 or any of its transitive parent groups matches at least one rule. A group is also visible if it
 or any transitive parent group is already provisioned in the account. Local Databricks groups
 remain visible regardless of the filters.

 Only group filters can be created. Filters do not change provisioning or sign-in for users and
 service principals. Filters are immutable: to change a rule, delete it and create a new one.

## The IdentityVisibilityFilter object

- [account-identity-visibility-filter/object.md](account-identity-visibility-filter/object.md)

## Endpoints

### Get an identity-visibility filter

- [GET /api/2.0/identity/{name=accounts/*/identity-visibility-filters/*}](get-identity-visibility-filter.md)

### List the identity-visibility filters in the account

- [GET /api/2.0/identity/{parent=accounts/*}/identity-visibility-filters](list-identity-visibility-filters.md)

### Create an identity-visibility filter in the account

- [POST /api/2.0/identity/{parent=accounts/*}/identity-visibility-filters](create-identity-visibility-filter.md)

### Delete an identity-visibility filter

- [DELETE /api/2.0/identity/{name=accounts/*/identity-visibility-filters/*}](delete-identity-visibility-filter.md)