22.9. Viewing group members using IdM CLI
Follow this procedure to view members of a group using IdM CLI. You can view both direct and indirect group members. For more information, see Direct and indirect group members.
Procedure
To list members of a group, use the
ipa group-show group_namecommand. For example:$ ipa group-show group_a ... Member users: user_a Member groups: group_b Indirect Member users: user_b注意The list of indirect members does not include external users from trusted Active Directory domains. The Active Directory trust user objects are not visible in the Identity Management interface because they do not exist as LDAP objects within Identity Management.