Edit users in IAM user groups
Use IAM groups to apply the same permissions policies across multiple users at once. You can then add users to or remove users from an IAM user group. This is useful as people enter and leave your organization.
View policy access
Before you change the permissions for a policy, you should review its recent service-level activity. This is important because you don't want to remove access from a principal (person or application) who is using it. For more information about viewing last accessed information, see Refine permissions in AWS using last accessed information.
Add or remove a user in a user group (console)
You can use the AWS Management Console to add or remove a user from a user group.
To add a user to an IAM user group (console)
Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/
. -
In the navigation pane, choose User groups and then choose the name of the group.
-
Choose the Users tab and then choose Add users. Select the checkbox next to the users you want to add.
-
Choose Add users.
To remove a user from an IAM group (console)
Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/
. -
In the navigation pane, choose User groups and then choose the name of the group.
-
Choose the Users tab. Select the checkbox next to the users you want to remove and then choose Remove users.
Add or remove a user in a user group (AWS CLI)
You can use the AWS CLI to add or remove a user from a user group.
To add a user to an IAM user group (AWS CLI)
-
Use the following command:
To remove a user from an IAM user group (AWS CLI)
-
Use the following command:
Add or remove a user in a user group (AWS API)
You can use the AWS API to add or remove a user in a user group.
To add a user to an IAM group (AWS API)
-
Complete the following operation:
To remove a user from an IAM user group (AWS API)
-
Complete the following operation: