Groups
Groups in Knocknoc map users to ACLs. If your group is provided by your IDP (SAML), the membership of the group is set by the IDP. The groupname just needs to match the IDP name.
Otherwise, simply create a group, and map it to acls using the Group dialog.
On login, the user will be granted the ACLs set in this group. Users in multiple groups will get all the ACLs from each of those groups.