Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions,
see Getting Started with Amazon Web Services in China
(PDF).
Viewing and updating an Amazon Managed Microsoft AD group's
details
Use the following procedure to view or update an Amazon Managed Microsoft AD group's details with
user and group management or Amazon Directory Service Data in either the Amazon Web Services Management Console, Amazon CLI, or Amazon Tools for PowerShell.
Viewing an Amazon Managed Microsoft AD group's detail
You can view or update a group's details in the Amazon Web Services Management Console, Amazon CLI, or
Amazon Tools for PowerShell.
Before you begin either procedure, you need to complete the following:
- Amazon Web Services Management Console
-
You can view an Amazon Managed Microsoft AD group's details in the Amazon Web Services Management Console.
To view Amazon Managed Microsoft AD group's details with the Amazon Web Services Management Console
-
Open the Amazon Directory Service console at https://console.amazonaws.cn/directoryservicev2/.
-
From the navigation pane, choose Active Directory, and
then choose Directories. You're directed to the
Directories screen where you can view a list of directories
in your Amazon Web Services Region.
-
Choose a directory. You're directed to the Directory
details screen.
-
Choose Group. The tab shows a list of groups in your
Amazon Web Services Region.
-
Choose a group. To find groups, enter the group name in the search box under
the Groups section. You're directed to the Group
details screen. The Group details screen shows
the following information:
-
Member tab lists the users and child groups that are
members of your group.
-
Parent groups tab lists the parent groups that your group
is a member of.
-
Properties tab lists the group properties (such as
primary information like group name, group display name, etc.).
- Amazon CLI
-
You can view an Amazon Managed Microsoft AD group's details with the Amazon Directory Service Data CLI.
To view an Amazon Managed Microsoft AD group's details with the Amazon CLI
The following describes how to view an Amazon Managed Microsoft AD group's details with the
Amazon CLI.
-
To view a group's details, open the Amazon CLI, and run the following command,
replacing the Directory ID and group name with your Amazon Managed Microsoft AD Directory ID and
group name:
aws ds-data describe-group --directory-id d-1234567890 --sam-account-name "your-group-name"
To view an Amazon Managed Microsoft AD group's group members with the Amazon CLI
The following describes how to view an Amazon Managed Microsoft AD group's members with the
Amazon CLI.
-
To view a group's details, open the Amazon CLI, and run the following command,
replacing the Directory ID and group name with your Amazon Managed Microsoft AD Directory ID and
group name:
aws ds-data list-group-members --directory-id d-1234567890 --sam-account-name "your-group-name"
- Amazon Tools for PowerShell
-
You can view an Amazon Managed Microsoft AD group's details with Amazon Tools for PowerShell.
To view an Amazon Managed Microsoft AD group's details with Amazon Tools for PowerShell
The following describes how to view an Amazon Managed Microsoft AD group's details with the
Tools for PowerShell.
-
To view a group's details, open the PowerShell, and run the
following command, replacing the Directory ID and group name with your
Amazon Managed Microsoft AD Directory ID and group name:
Get-DSDGroup -DirectoryId d-1234567890 -SAMAccountName "your-group-name"
To view an Amazon Managed Microsoft AD group's group members with Amazon Tools for PowerShell
The following describes how to view an Amazon Managed Microsoft AD group's members with the
Tools for PowerShell.
-
To view a group's details, open the PowerShell, and run the
following command, replacing the Directory ID and group name with your
Amazon Managed Microsoft AD Directory ID and group name:
(Get-DSDGroupMemberList -DirectoryId d-1234567890 -SAMAccountName "your-group-name").Members
Updating an Amazon Managed Microsoft AD group's details
Use the following procedure to update an Amazon Managed Microsoft AD group's details with
user and group management or Amazon Directory Service Data in either the Amazon Web Services Management Console, Amazon CLI, or Amazon Tools for PowerShell.
Before you begin either procedure, you need to complete the following:
- Amazon Web Services Management Console
-
You can update a group's details with the Amazon Web Services Management Console. For more information,
see Amazon Directory Service Data attributes and Group type and group scope
To update an Amazon Managed Microsoft AD group's details with the Amazon Web Services Management Console
-
Open the Amazon Directory Service console at https://console.amazonaws.cn/directoryservicev2/.
-
From the navigation pane, choose Active Directory, and
then choose Directories. You're directed to the
Directories screen where you can view a list of directories
in your Amazon Web Services Region.
-
Choose a directory. You're directed to the Directory
details screen.
-
Choose Group. The tab shows a list of groups in your
Amazon Web Services Region.
-
Choose a group. To find groups, enter the group name in the search box under
the Groups section. You're directed to the Group
details screen.
-
To edit users and child groups that are members of your group, choose
Members. From this tab, you can add and remove users and
child groups from your group. For more information, see Adding and removing members to
groups and groups to groups.
-
To edit parent groups that your group is a member of, choose Parent
groups. From this tab, you can add and remove your group from parent
groups. For more information, see Adding and removing members to
groups and groups to groups.
-
To edit your group properties, choose Properties, and
then choose Edit. Or choose Actions, and
then choose Edit group. Make and review your updates, and
then choose Save.
- Amazon CLI
-
The following describes how to format a request that updates an Amazon Managed Microsoft AD
group's details with the Amazon Directory Service Data CLI.
When you update a group, you must include your directory ID number and group
name. You also must include the update type and attribute you want to update in your
request, such as a group email address with the EmailAddress parameter.
For more information, see Amazon Directory Service Data attributes and Group type and group scope.
-
To update an Amazon Managed Microsoft AD group's details with the Amazon CLI
To update a group's details, open the Amazon CLI, and run the following command,
replacing the Directory ID, group name, update type, and attribute with your
Amazon Managed Microsoft AD Directory ID, group name, and desired update type and attribute:
aws ds-data update-group --directory-id d-1234567890 --sam-account-name "your-group-name" --update-type "REPLACE" --group-scope "global"
- Amazon Tools for PowerShell
-
The following describes how to format a request that updates an Amazon Managed Microsoft AD
group's details with Amazon Tools for PowerShell.
When you update a group, you must include your directory ID number and group
name. You also must include the update type and attribute you want to update in your
request, such as a group email address with the EmailAddress parameter.
For more information, see Amazon Directory Service Data attributes and Group type and group scope.
-
To update an Amazon Managed Microsoft AD group's details with Amazon Tools for PowerShell
To update a group's details, open the PowerShell, and run the
following command, replacing the Directory ID, group name, update type, and
attribute with your Amazon Managed Microsoft AD Directory ID, group name, and desired update type
and attribute:
Update-DSDGroup -DirectoryId d-1234567890 -SAMAccountName "your-group-name" -UpdateType "REPLACE" -GroupScope "global"