22.3. Adding a user group using IdM CLI

Prerequisites

• You must be logged in as the administrator. For details, see Using kinit to log in to IdM manually.

Procedure

• Add a user group by using the ipa group-add group_name command. For example, to create group_a:

  $ ipa group-add group_a
  ---------------------
  Added group "group_a"
  ---------------------
    Group name: group_a
    GID: 1133400009

  By default, ipa group-add adds a POSIX user group. To specify a different group type, add options to ipa group-add:

• --nonposix to create a non-POSIX group

• --external to create an external group

  For details on group types, see The different group types in IdM.

  You can specify a custom GID when adding a user group by using the --gid=custom_GID option. If you do this, be careful to avoid ID conflicts. If you do not specify a custom GID, IdM automatically assigns a GID from the available ID range.