22.8. Adding users or groups as member managers to an IdM user group using the IdM CLI

Prerequisites

• You must be logged in as the administrator. For details, see Using kinit to log in to IdM manually.
• You must have the name of the user or group you are adding as member managers and the name of the group you want them to manage.

Procedure

• Add a user as a member manager to an IdM user group by using the ipa group-add-member-manager command.

  For example, to add the user test as a member manager of group_a:

  $ ipa group-add-member-manager group_a --users=test
  Group name: group_a
  GID: 1133400009
  Membership managed by users: test
  -------------------------
  Number of members added 1
  -------------------------

  User test can now manage members of group_a.

• Add a group as a member manager to an IdM user group by using the ipa group-add-member-manager command.

  For example, to add the group group_admins as a member manager of group_a:

  $ ipa group-add-member-manager group_a --groups=group_admins
  Group name: group_a
  GID: 1133400009
  Membership managed by groups: group_admins
  Membership managed by users: test
  -------------------------
  Number of members added 1
  -------------------------

  Group group_admins can now manage members of group_a.

  注意

  After you add a member manager to a user group, the update may take some time to spread to all clients in your Identity Management environment.

Verification

• Using the ipa group-show command to verify the user and group were added as member managers.

  $ ipa group-show group_a
  Group name: group_a
  GID: 1133400009
  Membership managed by groups: group_admins
  Membership managed by users: test