---
name: "pki-group"
section: "1"
platform: "linux"
package: "pki-tools"
version: "10.10.2-3"
release: "Debian 11 (Bullseye)"
platforms: ["linux"]
url: "https://new.carta.tech/pki-group"
---

# pki-group(1)

Command-line interface for managing PKI groups.

## NAME

pki-group - Command-line interface for managing PKI groups.

## SYNOPSIS

**pki** \[*CLI-options*\] **lt;subsystemgt;-group**\
 **pki** \[*CLI-options*\] **lt;subsystemgt;-group-find** \[*command-options*\]\
 **pki** \[*CLI-options*\] **lt;subsystemgt;-group-show** *group-ID* \[*command-options*\]\
 **pki** \[*CLI-options*\] **lt;subsystemgt;-group-add** *group-ID* \[*command-options*\]\
 **pki** \[*CLI-options*\] **lt;subsystemgt;-group-mod** *group-ID* \[*command-options*\]\
 **pki** \[*CLI-options*\] **lt;subsystemgt;-group-del** *group-ID* \[*command-options*\]

## DESCRIPTION

The **pki lt;subsystemgt;-group** commands provide command-line interfaces to manage groups on the specified subsystem.

Valid subsystems are **ca**, **kra**, **ocsp**, **tks**, and **tps**.

**pki** \[*CLI-options*\] **lt;subsystemgt;-group**\
\
     This command is to list available group commands for the subsystem.

**pki** \[*CLI-options*\] **lt;subsystemgt;-group-find** \[*command-options*\]\
\
     This command is to list groups in the subsystem.

**pki** \[*CLI-options*\] **lt;subsystemgt;-group-show** *group-ID* \[*command-options*\]\
\
     This command is to view a group details in the subsystem.

**pki** \[*CLI-options*\] **lt;subsystemgt;-group-add** *group-ID* \[*command-options*\]\
\
     This command is to add a group into the subsystem.

**pki** \[*CLI-options*\] **lt;subsystemgt;-group-mod** *group-ID* \[*command-options*\]\
\
     This command is to modify a group in the subsystem.

**pki** \[*CLI-options*\] **lt;subsystemgt;-group-del** *group-ID* \[*command-options*\]\
\
     This command is to delete a group from the subsystem.

## OPTIONS

The CLI options are described in **[pki(1)](/pki/1.md)**.

## OPERATIONS

To view available group commands, type **pki lt;subsystemgt;-group**. To view each command's usage, type **pki lt;subsystemgt;-group-lt;commandgt; --help**.

All group commands must be executed as the subsystem administrator.

For example, to list groups in CA execute the following command:

```
$ pki <CA admin authentication> ca-group-find
```

The results can be paged by specifying the (0-based) index of the first entry to return and the maximum number of entries returned:

```
$ pki <CA admin authentication> ca-group-find --start 20 --size 10
```

The above command will return entries #20 to #29.

To view a CA group, specify the group ID in the following command:

```
$ pki <CA admin authentication> ca-group-show testgroup
```

To add a CA group, specify the group ID in the following command:

```
$ pki <CA admin authentication> ca-group-add testgroup
```

To modify a CA group, specify the group ID and the attributes to be modified in the following command:

```
$ pki <CA admin authentication> ca-group-mod testgroup --description "Test Group"
```

To delete a CA group, specify the group ID in the following command:

```
$ pki <CA admin authentication> ca-group-del testgroup
```

## SEE ALSO

**[pki-group-member(1)](/pki-group-member/1.md)**\
\
     Group member management commands

## AUTHORS

Ade Lee lt;alee@redhat.comgt;, Endi S. Dewata lt;edewata@redhat.comgt;, and Matthew Harmsen lt;mharmsen@redhat.comgt;.

## COPYRIGHT

Copyright (c) 2014 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.