Skip to main content
Manage the groups in your 1Password account. Groups can be used to organize your team and delegate administrative responsibilities. You can give groups access to vaults and assign them permissions, so you don’t have to keep track of everyone separately.

Subcommands

group create

Create a group and receive a JSON object with the group’s ID.
op group create <name> [flags]

Flags

--description string   Set the group's description.

group delete

Remove a group. Specify the group to delete by its name or ID.
op group delete [{ <groupName> | <groupID> | - }] [flags]

group edit

Edit a group’s name or description. Specify the group to edit by its name or ID.
op group edit [{ <groupName> | <groupID> | - }] [flags]

Flags

--description description   Change the group's description.
--name name                 Change the group's name.

group get

Get details about a group. Specify the group by its name or ID.
op group get [{ <groupName> | <groupID> | - }] [flags]

Use standard input to specify objects

If you enter a hyphen (-) instead of a single object for this command, the tool will read object specifiers from standard input (stdin). Separate each specifier with a new line. For more information about how to specify objects, run op help. You can also pass the command a list or array of JSON objects. The tool will get an item for any object that has an ID, ignoring line breaks. This is useful for passing information from one op command to another.

Examples

Get details for all groups:
op group list --format=json | op group get -
Get details for the groups who have access to a vault:
op group list --vault "Production keys" --format=json | op group get -

group list

List groups.
op group list [flags]

Flags

--user user     List groups that a user belongs to.
--vault vault   List groups that have direct access to a vault.
Returns all groups in an account by default.

Examples

Get details for all groups:
op group list | op group get -
Get details for the groups that have access to a vault:
op group list --vault Staging --format=json | op group get -
Get details for the groups that a user belongs to:
op group list --user wendy_appleseed@1password.com --format=json | op group get -

group user

Subcommands

group user grant

Grant a user access to a group.
op group user grant [flags]

Flags

--group string   Specify the group to grant the user access to.
--role string    Specify the user's role as a member or manager. Default: member.
--user string    Specify the user to grant group access to.

group user list

Retrieve users that belong to a group.
op group user list <group> [flags]

group user revoke

Revoke a user’s access to a group.
op group user revoke [flags]

Flags

--group string   Specify the group to remove the user from.
--help           Get help with group user revoke.
--user string    Specify the user to remove from the group.