---
title: "ezgh sso groups"
description: "Directory groups: who's in which team, for assignments and EZGH access."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh sso groups

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh sso groups <command>
```

Directory groups collect directory users. Assign a group to an application to let its members sign in, send its name in tokens' groups claim, or attach EZGH policies to it (`ezgh iam policies attach <policy> --sso-group <group>`). They're separate from IAM groups, which hold console members. Groups are given by ID, slug (dgp\_…) or name. A group an identity provider pushes over SCIM is locked while its SCIM token lives.

Part of [`ezgh sso`](/cli/reference/sso).

## Flags

This command also takes the [global flags](/cli/reference#global-flags).

## Subcommands

| Command | Description |
| --- | --- |
| [`ezgh sso groups add-members`](/cli/reference/sso-groups-add-members) | Add users to a directory group |
| [`ezgh sso groups create`](/cli/reference/sso-groups-create) | Create a directory group |
| [`ezgh sso groups delete`](/cli/reference/sso-groups-delete) | Delete a directory group |
| [`ezgh sso groups get`](/cli/reference/sso-groups-get) | Show a directory group, by ID, slug or name |
| [`ezgh sso groups list`](/cli/reference/sso-groups-list) | List the directory's groups |
| [`ezgh sso groups members`](/cli/reference/sso-groups-members) | List a directory group's members |
| [`ezgh sso groups remove-members`](/cli/reference/sso-groups-remove-members) | Remove users from a directory group |
| [`ezgh sso groups update`](/cli/reference/sso-groups-update) | Change a directory group's name or description |

Source: https://docs.ezghcloud.com/cli/reference/sso-groups/index.mdx