# Rancher CLI, cannot add user groups **URL:** \ **Category:** SUSE Rancher Prime\ **Created:** [December 20, 2021, 7:46am UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509 "2021-12-20T07:46:46Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![ElnurHello](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/elnurhello/32/8415_2.png) [@ElnurHello](https://forums.suse.com/u/ElnurHello)\ **Post date:** [December 20, 2021, 7:46am UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509/1 "2021-12-20T07:46:46Z")
Hello, guys. I am using Rancher CLI to add members. In UI there are User groups and Users. I can add Users since they have name but not User groups. Is that possible somehow to add User groups either ? Maybe can put name for User groups ? ---
**Author:** ![jordonleach](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/jordonleach/32/8418_2.png) [@jordonleach](https://forums.suse.com/u/jordonleach)\ **Post date:** [December 20, 2021, 4:02pm UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509/2 "2021-12-20T16:02:10Z")
You will need an external auth provider that supports groups as local authorization does not support groups. More information can be found [here](https://rancher.com/docs/rancher/v2.6/en/admin-settings/rbac/default-custom-roles/#assigning-a-custom-role-to-a-group). ---
**Author:** ![ElnurHello](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/elnurhello/32/8415_2.png) [@ElnurHello](https://forums.suse.com/u/ElnurHello)\ **Post date:** [December 21, 2021, 7:25am UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509/3 "2021-12-21T07:25:27Z")
> [@jordonleach](#): > > xternal auth pro Thank you for reply. I am using command “./rancher projects add-member-role” [username] [rolename] When I list people they have special username is “User” column but “User groups” don’t have any username. if member is added via following command, I still need Username for groups ---
**Author:** ![ElnurHello](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/elnurhello/32/8415_2.png) [@ElnurHello](https://forums.suse.com/u/ElnurHello)\ **Post date:** [December 21, 2021, 7:50am UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509/4 "2021-12-21T07:50:21Z")
> [@ElnurHello](#): > > “./rancher projects add-member-role” and also we have External auth provider : “Authentication Provider: ActiveDirectory”. I can add both Users and User groups in UI without any problem. My question is about how can I add User Groups in CLI. In docs it says “./rancher projects add-member-role” [username] [rolename]" command needs Username but We don’t have such Username for User groups ---
**Author:** ![wcoateRR](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/wcoaterr/32/8144_2.png) [@wcoateRR](https://forums.suse.com/u/wcoateRR)\ **Post date:** [December 21, 2021, 10:22pm UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509/5 "2021-12-21T22:22:47Z")
Have you verified if it adds to the ClusterRoles correctly? I’m using FreeIPA rather than AD but when I put in a binding for all members of the equivalent of Domain Admins group to be Cluster Admins and logged in for the first time with my user in that group it partially acted like I was a cluster admin but also when I looked at my user’s status I was not (but I had more menus than the standard user the menu thought I was). I didn’t test enough to see if it was a UI glitch or permission error as I still had my local admin logged in in another window at the time. This was with Rancher 2.6.2. ---
**Author:** ![ElnurHello](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/elnurhello/32/8415_2.png) [@ElnurHello](https://forums.suse.com/u/ElnurHello)\ **Post date:** [December 21, 2021, 10:41pm UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509/6 "2021-12-21T22:41:23Z")
so is that possible to put "Username"s for the User Groups in Configuration (Active Directory to Rancher) ? It would be great to know which field and what expression would give Username for User Groups. ---
**Author:** ![wcoateRR](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/wcoaterr/32/8144_2.png) [@wcoateRR](https://forums.suse.com/u/wcoateRR)\ **Post date:** [December 21, 2021, 10:55pm UTC](https://forums.suse.com/t/rancher-cli-cannot-add-user-groups/36509/7 "2021-12-21T22:55:30Z")
No clue, I haven’t used the Rancher CLI at all. I was more warning you to validate anything you do with AD groups that it works right before you rely on it.