If Jenkins is running in google cloud it will need a service account that has access to the admin API to resolve the group. This is always a bit tricky as the admin API is a use space API (you need to give the service account permission to operate on your behalf.) I have never run rancher and groups on GCP as GKE has this built in. https://apps.google.com/supportwidget/articlehome?hl=en&article_url=https%3A%2F%2Fsu[…]product_context=162106&product_name=UnuFlow&trigger_context=a https://cloud.google.com/kubernetes-engine/docs/how-to/google-groups-rbac