Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Edit users in IAM groups

Focus mode
Edit users in IAM groups - AWS Identity and Access Management

Use IAM groups to apply the same permissions policies across multiple users at once. You can then add users to or remove users from an IAM group. This is useful as people enter and leave your organization.

Review policy access

Before you remove a group, use the group details page to review the members (IAM users) of the group, the policies attached to the group on the Permissions tab and review recent service-level activity using the Last Accessed tab. This helps prevent unintentionally removing access from a principal (person or application) who is using it. For more information about viewing last accessed information, see Refine permissions in AWS using last accessed information.

Add an IAM user to an IAM group

IAM console
  1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane, choose User groups and then choose the name of the group.

  3. Choose the Users tab and then choose Add users. Select the check box next to the users you want to add.

  4. Choose Add users.

AWS CLI

Run the following command:

API

Call the following operation:

  1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane, choose User groups and then choose the name of the group.

  3. Choose the Users tab and then choose Add users. Select the check box next to the users you want to add.

  4. Choose Add users.

Remove an IAM user from an IAM group

IAM console
  1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane, choose User groups and then choose the name of the group.

  3. Choose the Users tab. Select the check box next to the users you want to remove and then choose Remove users.

AWS CLI

Run the following command:

API

Call the following operation:

  1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane, choose User groups and then choose the name of the group.

  3. Choose the Users tab. Select the check box next to the users you want to remove and then choose Remove users.

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.