Skip to main content

group_members

Creates, updates, deletes, gets or lists a group_members resource.

Overview​

Namegroup_members
TypeResource
Idaws.ds_data.group_members

Fields​

The following fields are returned by SELECT queries:

NameDatatypeDescription
member_typestringThe AD type of the member object. (USER, GROUP, COMPUTER)
sam_account_namestringThe name of the group member. (pattern: <code>^[^:;|=+"*?<>/\,&#91;&#93;@]+$</code>)
sidstringThe unique security identifier (SID) of the group member.

Methods​

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_group_membersselectDirectoryId, regionReturns member information for the specified group. This operation supports pagination with the use of the NextToken request and response parameters. If more results are available, the ListGroupMembers.NextToken member contains a token that you pass in the next call to ListGroupMembers. This retrieves the next set of items. You can also specify a maximum number of return results with the MaxResults parameter.
add_group_memberupdateDirectoryId, region, GroupName, MemberNameAdds an existing user, group, or computer as a group member.
remove_group_memberexecDirectoryId, region, GroupName, MemberNameRemoves a member from a group.

Parameters​

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
DirectoryIdstringThe identifier (ID) of the directory that's associated with the member.
regionstringAWS region (default: us-east-1)

SELECT examples​

Returns member information for the specified group. This operation supports pagination with the use of the NextToken request and response parameters. If more results are available, the ListGroupMembers.NextToken member contains a token that you pass in the next call to ListGroupMembers. This retrieves the next set of items. You can also specify a maximum number of return results with the MaxResults parameter.

SELECT
member_type,
sam_account_name,
sid
FROM aws.ds_data.group_members
WHERE DirectoryId = '{{ DirectoryId }}' -- required
AND region = '{{ region }}' -- required
;

UPDATE examples​

Adds an existing user, group, or computer as a group member.

UPDATE aws.ds_data.group_members
SET
ClientToken = '{{ ClientToken }}',
GroupName = '{{ GroupName }}',
MemberName = '{{ MemberName }}',
MemberRealm = '{{ MemberRealm }}'
WHERE
DirectoryId = '{{ DirectoryId }}' --required
AND region = '{{ region }}' --required
AND GroupName = '{{ GroupName }}' --required
AND MemberName = '{{ MemberName }}' --required;

Lifecycle Methods​

Removes a member from a group.

EXEC aws.ds_data.group_members.remove_group_member
@DirectoryId='{{ DirectoryId }}' --required,
@region='{{ region }}' --required
@@json=
'{
"ClientToken": "{{ ClientToken }}",
"GroupName": "{{ GroupName }}",
"MemberName": "{{ MemberName }}",
"MemberRealm": "{{ MemberRealm }}"
}'
;