Sync open source content 🐝 (from fb452c0783a62a32bae2e66bb29099da57e9d42f)

Author: beezythebot

docs/ai-control-plane/distribute/plugins/index.mdx

@@ -1,6 +1,6 @@
 ---
 title: Plugins
-description: "Bundle MCP servers and skills into plugins, assign them to roles, and publish to agent marketplaces via GitHub."
+description: "Bundle MCP servers and skills into plugins, assign them to organization audiences, and publish to agent marketplaces via GitHub."
 ---
 
 import { Callout } from "@/mdx/components";
@@ -22,7 +22,7 @@ Plugins publish through a GitHub-backed marketplace. Set it up once, then manage
 Create a plugin with a name and description, then manage its contents from the detail page:
 
 - Add and remove MCP servers, and manage bundled skills
-- **Assignments** — manage which roles or members receive the plugin
+- **Assignments** — manage which organization audiences receive the plugin on their devices' next sync
 - **Install** — per-client installation instructions with copy buttons for Claude Code, Claude Cowork, Cursor, Codex, and OpenCode, covering per-user marketplace registration, org-wide managed settings, and team marketplace registration
 - **Publish** — push the plugin to the GitHub marketplace
 
@@ -32,6 +32,26 @@ Per-platform setup differs enough to warrant its own page for some agents. See [
 
 ## Assignments
 
-Each plugin has an **Assignments** page, opened from the left-hand menu of its detail page, for managing which roles or members receive the plugin. New plugins are assigned to everyone by default; narrow delivery from the same page.
+Each plugin has an **Assignments** page, opened from the left-hand menu of its detail page, for managing which audiences receive the plugin. New plugins are assigned to everyone by default.
+
+### Choose assignment audiences
+
+Open **Assignments**, click **Manage assignments**, and select one or more audiences:
+
+- **Everyone** includes every organization member.
+- **Roles** include members of the selected organization roles.
+- **Users** target individual organization members, including users synced from an identity provider (IdP).
+- **Directory groups** include members of groups synced from the organization's directory.
+- **Directory attributes** define audiences from attributes synced from the organization's directory.
+
+Click **Save assignments** after making a selection. The device agent applies the updated assignments when each device next syncs. Assignment changes aren't delivered in real time.
+
+### Assign individual users
+
+Search the **Users** group by name or email, then select each member who should receive the plugin. User options show the email address first and the member name underneath, which helps distinguish members with similar names.
+
+The picker displays up to five selected users as separate chips. Selecting six or more users collapses those selections into one count chip, such as **6 members**. Click the count chip to view the selected member roster with each member's name and email address. Other selected audience types remain visible as separate chips.
+
+If an existing user, role, directory group, or directory attribute assignment becomes unavailable, it remains visible in the picker so an admin can remove it. Unavailable audiences can't be selected for new assignments.
 
 Assignments currently gate delivery only through the [device agent](/docs/ai-control-plane/org-admin/device-agent). Claude Code, Claude Cowork, Cursor, and Codex marketplace installs don't support assignments, so a published plugin is available to anyone with access to the marketplace.