Skip to main content
A
Committed ⭐️⭐️
AKhan1027
Committed ⭐️⭐️
April 1, 2026
Solved

CDF Access Management - How to updated capabilities into existing groups.

  • April 1, 2026
  • 5 replies
  • 119 views

We have requirement to update capabilities in existing groups in CDF using Python SDK/API, we can add capabilities while creating group using python SDK, but if we want to updated that created group no provision for that. we tried client.iam.groups.create(group) but it creates new group with same name, in this case how we can update capabilities in group?

    Best answer by Mithila Jayalath

    ​@AKhan1027 Groups do not support direct updates via the API or Python SDK. The only available operations on groups are create and delete. 

    Recommended Workaround is to update capabilities on an existing group, you need to follow this pattern:

    1. Store the existing group's details (capabilities, source ID, members, etc.)

    2. Create a new group with the updated capabilities

    3. Delete the old group

    Please let me know if you have any further questions.

    5 replies

    Mithila Jayalath
    Expert ⭐️⭐️⭐️⭐️
    Mithila JayalathAnswer
    Expert ⭐️⭐️⭐️⭐️
    April 1, 2026

    ​@AKhan1027 Groups do not support direct updates via the API or Python SDK. The only available operations on groups are create and delete. 

    Recommended Workaround is to update capabilities on an existing group, you need to follow this pattern:

    1. Store the existing group's details (capabilities, source ID, members, etc.)

    2. Create a new group with the updated capabilities

    3. Delete the old group

    Please let me know if you have any further questions.

      A
      Committed ⭐️⭐️
      AKhan1027Author
      Committed ⭐️⭐️
      April 1, 2026

      In CDF, Groups must have id with it, does it not hamper if i delete group and create new one? 

      Mithila Jayalath
      Expert ⭐️⭐️⭐️⭐️
      Mithila Jayalath
      Expert ⭐️⭐️⭐️⭐️
      April 1, 2026

      The group id is autogenerated and it will be unique as per my knowledge. Make sure to create the new group with updated capabilities first and then delete old group.

        A
        Committed ⭐️⭐️
        AKhan1027Author
        Committed ⭐️⭐️
        April 2, 2026

        I’m wondering if groups are mapped strictly mapped with group id and cdf checks for access on the group id but not group name, then creating new will not make sense

        Mithila Jayalath
        Expert ⭐️⭐️⭐️⭐️
        Mithila Jayalath
        Expert ⭐️⭐️⭐️⭐️
        April 7, 2026

        ​@AKhan1027 A group's name or ID doesn't affect a user's permissions. Access is simply the total sum of all their group capabilities combined.  If you delete a group and recreate an identical copy, the user's access won't change. If you add more capabilities, the user will get them.

        Terms & ConditionsAccessibility statement