pxgrid user-groups

Synopsis

netapi ise pxgrid user-groups <USERNAME>

Description

Retrieves group memberships for a user from ISE’s identity stores (Active Directory, LDAP, internal).

Arguments

Argument Description

USERNAME

Username to lookup

Example

netapi ise pxgrid user-groups jsmith

Output:

╭────────────────────────────────────────────────╮
│              Groups for jsmith                 │
├────────────────────────────────────────────────┤
│ Group                                          │
├────────────────────────────────────────────────┤
│ Domain Users                                   │
│ GRP-Research-Staff                             │
│ GRP-VPN-Users                                  │
│ GRP-WiFi-Enterprise                            │
╰────────────────────────────────────────────────╯

Use Cases

Authorization Policy Debugging

Determine why a user received a specific authorization profile:

# Check user groups
netapi ise pxgrid user-groups jsmith

# Compare with policy conditions
netapi ise get-authz-profile "Research_Full_Access"

Security Audit

Verify user has appropriate group memberships:

# List groups for compliance check
netapi ise pxgrid -f json user-groups jsmith | jq '.groups[]'

See Also