Viewing and updating an Amazon Managed Microsoft AD group's details - Amazon Directory Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Viewing and updating an Amazon Managed Microsoft AD group's details

Use the following procedure to view or update an Amazon Managed Microsoft AD group's details with user and group management or Amazon Directory Service Data in either the Amazon Web Services Management Console, Amazon CLI, or Amazon Tools for PowerShell.

Viewing an Amazon Managed Microsoft AD group's detail

You can view or update a group's details in the Amazon Web Services Management Console, Amazon CLI, or Amazon Tools for PowerShell.

Before you begin either procedure, you need to complete the following:
Amazon Web Services Management Console

You can view an Amazon Managed Microsoft AD group's details in the Amazon Web Services Management Console.

To view Amazon Managed Microsoft AD group's details with the Amazon Web Services Management Console
  1. Open the Amazon Directory Service console at https://console.amazonaws.cn/directoryservicev2/.

  2. From the navigation pane, choose Active Directory, and then choose Directories. You're directed to the Directories screen where you can view a list of directories in your Amazon Web Services Region.

  3. Choose a directory. You're directed to the Directory details screen.

  4. Choose Group. The tab shows a list of groups in your Amazon Web Services Region.

  5. Choose a group. To find groups, enter the group name in the search box under the Groups section. You're directed to the Group details screen. The Group details screen shows the following information:

    • Member tab lists the users and child groups that are members of your group.

    • Parent groups tab lists the parent groups that your group is a member of.

    • Properties tab lists the group properties (such as primary information like group name, group display name, etc.).

Amazon CLI

You can view an Amazon Managed Microsoft AD group's details with the Amazon Directory Service Data CLI.

To view an Amazon Managed Microsoft AD group's details with the Amazon CLI

The following describes how to view an Amazon Managed Microsoft AD group's details with the Amazon CLI.

  • To view a group's details, open the Amazon CLI, and run the following command, replacing the Directory ID and group name with your Amazon Managed Microsoft AD Directory ID and group name:

aws ds-data describe-group --directory-id d-1234567890 --sam-account-name "your-group-name"
To view an Amazon Managed Microsoft AD group's group members with the Amazon CLI

The following describes how to view an Amazon Managed Microsoft AD group's members with the Amazon CLI.

  • To view a group's details, open the Amazon CLI, and run the following command, replacing the Directory ID and group name with your Amazon Managed Microsoft AD Directory ID and group name:

aws ds-data list-group-members --directory-id d-1234567890 --sam-account-name "your-group-name"
Amazon Tools for PowerShell

You can view an Amazon Managed Microsoft AD group's details with Amazon Tools for PowerShell.

To view an Amazon Managed Microsoft AD group's details with Amazon Tools for PowerShell

The following describes how to view an Amazon Managed Microsoft AD group's details with the Tools for PowerShell.

  • To view a group's details, open the Windows PowerShell, and run the following command, replacing the Directory ID and group name with your Amazon Managed Microsoft AD Directory ID and group name:

Get-DSDGroup -DirectoryId d-1234567890 -SAMAccountName "your-group-name"
To view an Amazon Managed Microsoft AD group's group members with Amazon Tools for PowerShell

The following describes how to view an Amazon Managed Microsoft AD group's members with the Tools for PowerShell.

  • To view a group's details, open the Windows PowerShell, and run the following command, replacing the Directory ID and group name with your Amazon Managed Microsoft AD Directory ID and group name:

(Get-DSDGroupMemberList -DirectoryId d-1234567890 -SAMAccountName "your-group-name").Members

Updating an Amazon Managed Microsoft AD group's details

Use the following procedure to update an Amazon Managed Microsoft AD group's details with user and group management or Amazon Directory Service Data in either the Amazon Web Services Management Console, Amazon CLI, or Amazon Tools for PowerShell.

Before you begin either procedure, you need to complete the following:
Amazon Web Services Management Console

You can update a group's details with the Amazon Web Services Management Console. For more information, see Amazon Directory Service Data attributes and Group type and group scope

To update an Amazon Managed Microsoft AD group's details with the Amazon Web Services Management Console
  1. Open the Amazon Directory Service console at https://console.amazonaws.cn/directoryservicev2/.

  2. From the navigation pane, choose Active Directory, and then choose Directories. You're directed to the Directories screen where you can view a list of directories in your Amazon Web Services Region.

  3. Choose a directory. You're directed to the Directory details screen.

  4. Choose Group. The tab shows a list of groups in your Amazon Web Services Region.

  5. Choose a group. To find groups, enter the group name in the search box under the Groups section. You're directed to the Group details screen.

  6. To edit users and child groups that are members of your group, choose Members. From this tab, you can add and remove users and child groups from your group. For more information, see Adding and removing members to groups and groups to groups.

  7. To edit parent groups that your group is a member of, choose Parent groups. From this tab, you can add and remove your group from parent groups. For more information, see Adding and removing members to groups and groups to groups.

  8. To edit your group properties, choose Properties, and then choose Edit. Or choose Actions, and then choose Edit group. Make and review your updates, and then choose Save.

Amazon CLI

The following describes how to format a request that updates an Amazon Managed Microsoft AD group's details with the Amazon Directory Service Data CLI.

When you update a group, you must include your directory ID number and group name. You also must include the update type and attribute you want to update in your request, such as a group email address with the EmailAddress parameter. For more information, see Amazon Directory Service Data attributes and Group type and group scope.

  • To update an Amazon Managed Microsoft AD group's details with the Amazon CLI

    To update a group's details, open the Amazon CLI, and run the following command, replacing the Directory ID, group name, update type, and attribute with your Amazon Managed Microsoft AD Directory ID, group name, and desired update type and attribute:

aws ds-data update-group --directory-id d-1234567890 --sam-account-name "your-group-name" --update-type "REPLACE" --group-scope "global"
Amazon Tools for PowerShell

The following describes how to format a request that updates an Amazon Managed Microsoft AD group's details with Amazon Tools for PowerShell.

When you update a group, you must include your directory ID number and group name. You also must include the update type and attribute you want to update in your request, such as a group email address with the EmailAddress parameter. For more information, see Amazon Directory Service Data attributes and Group type and group scope.

  • To update an Amazon Managed Microsoft AD group's details with Amazon Tools for PowerShell

    To update a group's details, open the Windows PowerShell, and run the following command, replacing the Directory ID, group name, update type, and attribute with your Amazon Managed Microsoft AD Directory ID, group name, and desired update type and attribute:

Update-DSDGroup -DirectoryId d-1234567890 -SAMAccountName "your-group-name" -UpdateType "REPLACE" -GroupScope "global"