Querying Groups

When running group queries, you can query any of the providers individually or you can run an aggregated query that retrieves a merged result from the user database.

Querying a Group via VAST Web UI

From the left navigation menu, choose User Management -> Groups.
In the Groups tab, click the Query Groups button ().
In the Query Groups dialog, in the Context field, select which provider(s) to query:
- Local. Searches the local provider.
- Aggregated. Searches all providers and retrieves a merged result. In case of conflicts between providers, attributes are resolved according to the following rules:
  - In case of conflict between local and non local providers, the local provider's attributes override those of the other providers.
  - In case of conflicting POSIX attributes on external providers, the POSIX primary provider overrules the other external provider.
  - All groups found for the user on all providers with distinct group names are treated as distinct groups to which the user belongs. Groups from different providers that share the same group name are merged according to the above conflict resolution rules.
- AD, NIS or LDAP. Searches the specific provider only. (Each of these options appears only if a provider of that type is connected to the cluster.)
Select a tenant from the Tenant dropdown to limit the search to a specific tenant.
Enter one group attribute value to search for in the field provided for the attribute. You can search for any of the following:
- GID (POSIX (NFS) group identifier)
- Groupname
  To query a group from the cluster's joined domain, enter the group name in the field provided without specifying the domain name suffix.
  To query a group from domains in other trusted forests, enter the group name followed by the domain name suffix: <group name>@<domain name>.
  Note
  Querying groups from non-joined domains requires multi-forest authentication to be enabled on the cluster.Active Directory Overview
- SID (SMB group SID)
Click Query.
If no group is found, an error message appears and the dialog remains open so that you can run another query.
If a group is found that matches the query, the group's details are displayed in the Groups tab. The context of the recent query is shown by the context indicator above the grid (for example: ).

Tip
To clear the query, click the clear query button: . The default listing of any and all local groups is restored to the tab.

Querying a Group via VAST CLI

To query a group via the VAST CLI, use the group query command.