Viewing user groups
Note
This guide requires you to use the CLI if one or more of the following conditions are true:
- The Block users from viewing the list of organization members and their details option is enabled in the organization's settings.
- The
organization.denyUserListingaccess policy applies, which prohibits viewing the organization's user list.
To view which groups a specific user belongs to, do the following:
-
Go to Yandex Identity Hub.
-
In the left-hand panel, select Users and select the user from the list that opens.
Optionally, use the search bar or filter at the top of the page.
-
Navigate to the Groups tab.
If you do not have the Yandex Cloud CLI yet, install and initialize it.
The folder used by default is the one specified when creating the CLI profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id options.
-
See the description of the CLI command for viewing the user's groups:
yc organization-manager group list-effective --help -
Run this command:
yc organization-manager group list-effective --subject_id <user_ID>Where
--subject_idis the user ID you got in the previous step.
Use the Group.ListEffective REST API method for the Group resource or the GroupService/ListEffective gRPC API call.