Skip to main content

group_members

Creates, updates, deletes, gets or lists a group_members resource.

Overview

Namegroup_members
TypeResource
Idaws.ds_data.group_members

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
member_typestringThe AD type of the member object. (USER, GROUP, COMPUTER)
sam_account_namestringThe name of the group member. (pattern: <code>^[^:;|=+"*?<>/\,&#91;&#93;@]+$</code>)
sidstringThe unique security identifier (SID) of the group member.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_group_membersselectDirectoryId, regionReturns member information for the specified group. This operation supports pagination with the use of the NextToken request and response parameters. If more results are available, the ListGroupMembers.NextToken member contains a token that you pass in the next call to ListGroupMembers. This retrieves the next set of items. You can also specify a maximum number of return results with the MaxResults parameter.
add_group_memberupdateDirectoryId, region, GroupName, MemberNameAdds an existing user, group, or computer as a group member.
remove_group_memberexecDirectoryId, region, GroupName, MemberNameRemoves a member from a group.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
DirectoryIdstringThe identifier (ID) of the directory that's associated with the member.
regionstringAWS region (default: us-east-1)

SELECT examples

Returns member information for the specified group. This operation supports pagination with the use of the NextToken request and response parameters. If more results are available, the ListGroupMembers.NextToken member contains a token that you pass in the next call to ListGroupMembers. This retrieves the next set of items. You can also specify a maximum number of return results with the MaxResults parameter.

SELECT
member_type,
sam_account_name,
sid
FROM aws.ds_data.group_members
WHERE DirectoryId = '{{ DirectoryId }}' -- required
AND region = '{{ region }}' -- required
;

UPDATE examples

Adds an existing user, group, or computer as a group member.

UPDATE aws.ds_data.group_members
SET
ClientToken = '{{ ClientToken }}',
GroupName = '{{ GroupName }}',
MemberName = '{{ MemberName }}',
MemberRealm = '{{ MemberRealm }}'
WHERE
DirectoryId = '{{ DirectoryId }}' --required
AND region = '{{ region }}' --required
AND GroupName = '{{ GroupName }}' --required
AND MemberName = '{{ MemberName }}' --required;

Lifecycle Methods

Removes a member from a group.

EXEC aws.ds_data.group_members.remove_group_member
@DirectoryId='{{ DirectoryId }}' --required,
@region='{{ region }}' --required
@@json=
'{
"ClientToken": "{{ ClientToken }}",
"GroupName": "{{ GroupName }}",
"MemberName": "{{ MemberName }}",
"MemberRealm": "{{ MemberRealm }}"
}'
;