According to an exemplary embodiment, a method for generating an enterprise user group is provided. The method may include receiving a set of attributes for an enterprise network user; receiving one or more enterprise group member identification rules including a similarity distance threshold and a set of target attributes; calculating, using a hardware processor, a similarity assessment score based on the set of target attributes and the set of attributes; and determining, using the hardware processor, whether the enterprise network user is an enterprise group member based on the similarity assessment score and the similarity distance threshold.