Add groups and users

The following sections show how to add groups and users to a domain from the SageMaker AI console or AWS CLI.

Note

If the domain was created before October 1st, 2023, you can only add groups and users to the domain from the SageMaker AI console.

SageMaker AI console

Complete the following procedure to add groups and users to your domain from the SageMaker AI console.

1. On the Groups tab, choose Assign users and groups.

2. On the Assign users and groups page, select the users and groups that you want to add.

3. Choose Assign users and groups.

AWS CLI

Complete the following procedure to add groups and users to your domain from the AWS CLI.

1. Fetch the SingleSignOnApplicationArn of the domain with a call to describe-domain. SingleSignOnApplicationArn is the ARN of the application managed in IAM Identity Center.

   aws sagemaker describe-domain \
   --region region \
   --domain-id domain-id

2. Associate the user or group with the domain. To accomplish this, pass the SingleSignOnApplicationArn value returned from the describe-domain command as the application-arn parameter in a call to create-application-assignment.You must also pass the type and ID of the entity to associate.

   aws sso-admin create-application-assignment \
   --application-arn application-arn \
   --principal-id principal-id \
   --principal-type principal-type