1. Packages
  2. Cisco ISE Provider
  3. API Docs
  4. identitymanagement
  5. getActiveDirectoryGroupsByDomain
Viewing docs for Cisco ISE v0.3.0
published on Saturday, Mar 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-ise

ise.identitymanagement.getActiveDirectoryGroupsByDomain

ise logo
Viewing docs for Cisco ISE v0.3.0
published on Saturday, Mar 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-ise

    This data source can read the Active Directory Groups By Domain.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";

const example = ise.identitymanagement.getActiveDirectoryGroupsByDomain({
    joinPointId: "73808580-b6e6-11ee-8960-de6d7692bc40",
    domain: "cisco.com",
    filter: "CN=ISE Admins",
    sidFilter: "cisco.com/S-1-5-33-544",
    typeFilter: "UNIVERSAL",
});

    import pulumi
import pulumi_ise as ise

example = ise.identitymanagement.get_active_directory_groups_by_domain(join_point_id="73808580-b6e6-11ee-8960-de6d7692bc40",
    domain="cisco.com",
    filter="CN=ISE Admins",
    sid_filter="cisco.com/S-1-5-33-544",
    type_filter="UNIVERSAL")

    package main

import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/identitymanagement"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := identitymanagement.GetActiveDirectoryGroupsByDomain(ctx, &identitymanagement.GetActiveDirectoryGroupsByDomainArgs{
			JoinPointId: "73808580-b6e6-11ee-8960-de6d7692bc40",
			Domain:      "cisco.com",
			Filter:      pulumi.StringRef("CN=ISE Admins"),
			SidFilter:   pulumi.StringRef("cisco.com/S-1-5-33-544"),
			TypeFilter:  pulumi.StringRef("UNIVERSAL"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;

return await Deployment.RunAsync(() => 
{
    var example = Ise.IdentityManagement.GetActiveDirectoryGroupsByDomain.Invoke(new()
    {
        JoinPointId = "73808580-b6e6-11ee-8960-de6d7692bc40",
        Domain = "cisco.com",
        Filter = "CN=ISE Admins",
        SidFilter = "cisco.com/S-1-5-33-544",
        TypeFilter = "UNIVERSAL",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.identitymanagement.IdentitymanagementFunctions;
import com.pulumi.ise.identitymanagement.inputs.GetActiveDirectoryGroupsByDomainArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = IdentitymanagementFunctions.getActiveDirectoryGroupsByDomain(GetActiveDirectoryGroupsByDomainArgs.builder()
            .joinPointId("73808580-b6e6-11ee-8960-de6d7692bc40")
            .domain("cisco.com")
            .filter("CN=ISE Admins")
            .sidFilter("cisco.com/S-1-5-33-544")
            .typeFilter("UNIVERSAL")
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: ise:identitymanagement:getActiveDirectoryGroupsByDomain
      arguments:
        joinPointId: 73808580-b6e6-11ee-8960-de6d7692bc40
        domain: cisco.com
        filter: CN=ISE Admins
        sidFilter: cisco.com/S-1-5-33-544
        typeFilter: UNIVERSAL

    Using getActiveDirectoryGroupsByDomain

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getActiveDirectoryGroupsByDomain(args: GetActiveDirectoryGroupsByDomainArgs, opts?: InvokeOptions): Promise<GetActiveDirectoryGroupsByDomainResult>
function getActiveDirectoryGroupsByDomainOutput(args: GetActiveDirectoryGroupsByDomainOutputArgs, opts?: InvokeOptions): Output<GetActiveDirectoryGroupsByDomainResult>
    def get_active_directory_groups_by_domain(domain: Optional[str] = None,
                                          filter: Optional[str] = None,
                                          join_point_id: Optional[str] = None,
                                          sid_filter: Optional[str] = None,
                                          type_filter: Optional[str] = None,
                                          opts: Optional[InvokeOptions] = None) -> GetActiveDirectoryGroupsByDomainResult
def get_active_directory_groups_by_domain_output(domain: Optional[pulumi.Input[str]] = None,
                                          filter: Optional[pulumi.Input[str]] = None,
                                          join_point_id: Optional[pulumi.Input[str]] = None,
                                          sid_filter: Optional[pulumi.Input[str]] = None,
                                          type_filter: Optional[pulumi.Input[str]] = None,
                                          opts: Optional[InvokeOptions] = None) -> Output[GetActiveDirectoryGroupsByDomainResult]
    func GetActiveDirectoryGroupsByDomain(ctx *Context, args *GetActiveDirectoryGroupsByDomainArgs, opts ...InvokeOption) (*GetActiveDirectoryGroupsByDomainResult, error)
func GetActiveDirectoryGroupsByDomainOutput(ctx *Context, args *GetActiveDirectoryGroupsByDomainOutputArgs, opts ...InvokeOption) GetActiveDirectoryGroupsByDomainResultOutput

    > Note: This function is named GetActiveDirectoryGroupsByDomain in the Go SDK.

    public static class GetActiveDirectoryGroupsByDomain 
{
    public static Task<GetActiveDirectoryGroupsByDomainResult> InvokeAsync(GetActiveDirectoryGroupsByDomainArgs args, InvokeOptions? opts = null)
    public static Output<GetActiveDirectoryGroupsByDomainResult> Invoke(GetActiveDirectoryGroupsByDomainInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetActiveDirectoryGroupsByDomainResult> getActiveDirectoryGroupsByDomain(GetActiveDirectoryGroupsByDomainArgs args, InvokeOptions options)
public static Output<GetActiveDirectoryGroupsByDomainResult> getActiveDirectoryGroupsByDomain(GetActiveDirectoryGroupsByDomainArgs args, InvokeOptions options)

    fn::invoke:
  function: ise:identitymanagement/getActiveDirectoryGroupsByDomain:getActiveDirectoryGroupsByDomain
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Domain string
    The domain whose groups we want to fetch
    JoinPointId string
    Active Directory Join Point ID
    Filter string
    Exact match filter on group's CN
    SidFilter string
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    TypeFilter string
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    Domain string
    The domain whose groups we want to fetch
    JoinPointId string
    Active Directory Join Point ID
    Filter string
    Exact match filter on group's CN
    SidFilter string
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    TypeFilter string
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain String
    The domain whose groups we want to fetch
    joinPointId String
    Active Directory Join Point ID
    filter String
    Exact match filter on group's CN
    sidFilter String
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    typeFilter String
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain string
    The domain whose groups we want to fetch
    joinPointId string
    Active Directory Join Point ID
    filter string
    Exact match filter on group's CN
    sidFilter string
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    typeFilter string
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain str
    The domain whose groups we want to fetch
    join_point_id str
    Active Directory Join Point ID
    filter str
    Exact match filter on group's CN
    sid_filter str
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    type_filter str
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain String
    The domain whose groups we want to fetch
    joinPointId String
    Active Directory Join Point ID
    filter String
    Exact match filter on group's CN
    sidFilter String
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    typeFilter String
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.

    getActiveDirectoryGroupsByDomain Result

    The following output properties are available:

    Domain string
    The domain whose groups we want to fetch
    Groups List<GetActiveDirectoryGroupsByDomainGroup>
    List of groups
    Id string
    The provider-assigned unique ID for this managed resource.
    JoinPointId string
    Active Directory Join Point ID
    Filter string
    Exact match filter on group's CN
    SidFilter string
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    TypeFilter string
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    Domain string
    The domain whose groups we want to fetch
    Groups []GetActiveDirectoryGroupsByDomainGroup
    List of groups
    Id string
    The provider-assigned unique ID for this managed resource.
    JoinPointId string
    Active Directory Join Point ID
    Filter string
    Exact match filter on group's CN
    SidFilter string
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    TypeFilter string
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain String
    The domain whose groups we want to fetch
    groups List<GetActiveDirectoryGroupsByDomainGroup>
    List of groups
    id String
    The provider-assigned unique ID for this managed resource.
    joinPointId String
    Active Directory Join Point ID
    filter String
    Exact match filter on group's CN
    sidFilter String
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    typeFilter String
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain string
    The domain whose groups we want to fetch
    groups GetActiveDirectoryGroupsByDomainGroup[]
    List of groups
    id string
    The provider-assigned unique ID for this managed resource.
    joinPointId string
    Active Directory Join Point ID
    filter string
    Exact match filter on group's CN
    sidFilter string
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    typeFilter string
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain str
    The domain whose groups we want to fetch
    groups Sequence[GetActiveDirectoryGroupsByDomainGroup]
    List of groups
    id str
    The provider-assigned unique ID for this managed resource.
    join_point_id str
    Active Directory Join Point ID
    filter str
    Exact match filter on group's CN
    sid_filter str
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    type_filter str
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.
    domain String
    The domain whose groups we want to fetch
    groups List<Property Map>
    List of groups
    id String
    The provider-assigned unique ID for this managed resource.
    joinPointId String
    Active Directory Join Point ID
    filter String
    Exact match filter on group's CN
    sidFilter String
    Exact match filter on group's SID, optionally specifying the domain as prefix. e.g. S-1-5-33-544 and R1.dom/S-1-5-33-544 are legal.
    typeFilter String
    Can be exactly one of: BUILTIN, DOMAIN LOCAL, GLOBAL, UNIVERSAL.

    Supporting Types

    GetActiveDirectoryGroupsByDomainGroup

    Name string
    Group name
    Sid string
    Group SID
    Type string
    Group type
    Name string
    Group name
    Sid string
    Group SID
    Type string
    Group type
    name String
    Group name
    sid String
    Group SID
    type String
    Group type
    name string
    Group name
    sid string
    Group SID
    type string
    Group type
    name str
    Group name
    sid str
    Group SID
    type str
    Group type
    name String
    Group name
    sid String
    Group SID
    type String
    Group type

    Package Details

    Repository
    ise pulumi/pulumi-ise
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ise Terraform Provider.
    ise logo
    Viewing docs for Cisco ISE v0.3.0
    published on Saturday, Mar 7, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-ise
      Try Pulumi Cloud free. Your team will thank you.