user-manage group

Function

The user-manage group command creates a user group and displays the user group view.

The undo user-manage group command deletes a user group.

Format

user-manage group group-name

undo user-manage group group-name

Parameters

Parameter	Description	Value
group group-name	Specifies the group path and group name.	The value is a case-insensitive string, starting with /authentication domain name. It supports spaces, but does not support any slashes (/), quotation marks ("). If the group name does not contain any space or question marks, its length ranges from 2 to 225. If the group name contains spaces or question marks, its length ranges from 4 to 227, and you must enclose the name with double quotation marks ("), for example, "/default/group for test". The name cannot start or end with any spaces. The specified group path must exist on the device.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

When you run the user-manage group command and the specified group name already exists, the user group view is displayed.

To create or delete a user group, you must specify the group path and group name. For example, to create subgroup group1 for the /default group, you must set group-name to /default/group1.

The device has a default authentication domain. The root group of this domain is /default. You can create user groups under the root group. To create user groups in another authentication domain, you must create the authentication domain first.

You can run the undo user-manage group /default command to delete all the user groups, subgroups, and users in the root group.

Before you delete a user group, cancel the reference relationship between this user group (and its subgroups) and other elements (such as a policy). Otherwise, deleting the user group fails.

Deleting a user group affects its subgroups and users as follows:

All subgroups are deleted.
The users who are exclusive to this user group are deleted. If a user belongs to both this user group and another user group, only the user information is deleted from the parent group and the user object is not deleted.
When a user of this user group is deleted, the online user of this user object is also deleted.

User groups can share the same name.

Example

# Create user group info as a subgroup of R&D department rd.

<sysname> system-view
[sysname] user-manage group /default/rd/info
[sysname-usergroup-/default/rd/info]