Add groups and users - Amazon SageMaker AI
SageMaker AI consoleAmazon CLI
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Add groups and users

The following sections show how to add groups and users to a domain from the SageMaker AI console or Amazon CLI.

Note

If the domain was created before October 1st, 2023, you can only add groups and users to the domain from the SageMaker AI console.

SageMaker AI console

Complete the following procedure to add groups and users to your domain from the SageMaker AI console.

  1. On the Groups tab, choose Assign users and groups.

  2. On the Assign users and groups page, select the users and groups that you want to add.

  3. Choose Assign users and groups.

Amazon CLI

Complete the following procedure to add groups and users to your domain from the Amazon CLI.

  1. Fetch the SingleSignOnApplicationArn of the domain with a call to describe-domain. SingleSignOnApplicationArn is the ARN of the application managed in IAM Identity Center.

    aws sagemaker describe-domain \
--region region \
--domain-id domain-id

  2. Associate the user or group with the domain. To accomplish this, pass the SingleSignOnApplicationArn value returned from the describe-domain command as the application-arn parameter in a call to create-application-assignment.You must also pass the type and ID of the entity to associate.

    aws sso-admin create-application-assignment \
--application-arn application-arn \
--principal-id principal-id \
--principal-type principal-type