GetTemplateGroupAccessControlEntry - AWS Private CA Connector for Active Directory


Retrieves the group access control entries for a template.

Request Syntax

GET /templates/TemplateArn/accessControlEntries/GroupSecurityIdentifier HTTP/1.1

URI Request Parameters

The request uses the following URI parameters.


Security identifier (SID) of the group object from Active Directory. The SID starts with "S-".

Length Constraints: Minimum length of 7. Maximum length of 256.

Pattern: ^S-[0-9]-([0-9]+-){1,14}[0-9]+$

Required: Yes


The Amazon Resource Name (ARN) that was returned when you called CreateTemplate.

Length Constraints: Minimum length of 5. Maximum length of 200.

Pattern: ^arn:[\w-]+:pca-connector-ad:[\w-]+:[0-9]+:connector\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}\/template\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$

Required: Yes

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 Content-type: application/json { "AccessControlEntry": { "AccessRights": { "AutoEnroll": "string", "Enroll": "string" }, "CreatedAt": number, "GroupDisplayName": "string", "GroupSecurityIdentifier": "string", "TemplateArn": "string", "UpdatedAt": number } }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


An access control entry allows or denies an Active Directory group from enrolling and/or autoenrolling with a template.

Type: AccessControlEntry object


For information about the errors that are common to all actions, see Common Errors.


You can receive this error if you attempt to create a resource share when you don't have the required permissions. This can be caused by insufficient permissions in policies attached to your AWS Identity and Access Management (IAM) principal. It can also happen because of restrictions in place from an AWS Organizations service control policy (SCP) that affects your AWS account.

HTTP Status Code: 403


The request processing has failed because of an unknown error, exception or failure with an internal server.

HTTP Status Code: 500


The operation tried to access a nonexistent resource. The resource might not be specified correctly, or its status might not be ACTIVE.

HTTP Status Code: 404


The limit on the number of requests per second was exceeded.

HTTP Status Code: 429


An input validation error occurred. For example, invalid characters in a template name, or if a pagination token is invalid.

HTTP Status Code: 400

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: