Sign in
Groups

Get group

Returns a group by ID. Pass expand[]=member_count for its member count and expand[]=roles for the identifiers of its assigned roles.

get/zones/{zoneId}/groups/{groupId}

Path parameters

zoneIdstring required

Zone ID

groupIdstring required

Group ID

Query parameters

'member_count' | 'roles'
OR
string[]

Response

A zone-scoped group of users, assignable to roles and usable in policies. Roles assigned to a group are inherited by its members. external is false for groups managed in Keycard and true for groups synced from an external directory.

idstring required

Unique identifier of the group

zone_idstring required

Zone this group belongs to

organization_idstring required

Organization this group belongs to

identifierstring required

User-specified identifier, unique within the zone. Automatically assigned for groups from an external directory.

namestring required

Human-readable group name

externalboolean required

Whether the group is synced from an external directory. When true the group is directory-owned and its membership is read-only; when false it is managed in Keycard. Read-only: set by external sync, never by the caller.

member_countinteger

Number of users in the group. Included only when requested via expand[]=member_count (group get or list).

rolesstring[]

Identifiers of the roles assigned to the group; members inherit them. Deduped across scopes. Included only when requested via expand[]=roles (group get or list).

created_atstring date-time required

Entity creation timestamp

updated_atstring date-time required

Entity update timestamp

Changes

Changed in 1 of the 23 revisions of this API.1