Enabling or disabling user and group management or AWS Directory Service Data
To use user and group management or AWS Directory Service Data, it must be enabled. Once enabled, you can manage users and groups from the AWS Management Console, AWS CLI, or AWS Tools for PowerShell.
Important
You can only enable this feature from the Primary AWS Region for your directory. For more information, see Primary vs additional Regions.
Access controls for AWS Directory Service Data are different than access controls for AWS services like Amazon WorkSpaces, Amazon QuickSight, and Amazon WorkMail. For more information, see AWS application authorization with Directory Service Data.
Enabling AWS Directory Service Data
Use the following procedure to enable user and group management or AWS Directory Service Data for an existing AWS Managed Microsoft AD with either the AWS Management Console, AWS CLI, or AWS Tools for PowerShell.
Disabling AWS Directory Service Data
Use the following procedure to disable user and group management or AWS Directory Service Data for an existing AWS Managed Microsoft AD with either the AWS Management Console, AWS CLI, or AWS Tools for PowerShell.