---
title: "group query-by-prefix"
slug: "group-query-by-prefix"
tags: ["5.4"]
updated: 2026-10-28T01:52:52Z
published: 2026-10-28T01:52:52Z
canonical: "docs.vastdata.com/group-query-by-prefix"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# group query-by-prefix

This command queries Active Directory domains for groups by name prefix. It returns identifiers for groups whose names share a specified prefix.

> [!TIP]
> Tip
> 
> The identifier for a given group can be provided in a [view modify](/docs-5-4/docs/en/view-modify) command as `--share-ace-identifier` in order to configure an share-level ACE for the group. view modify

##### Usage

```plaintext
group  query-by-prefix --fqdn FQDN|ALL
                       --prefix PREFIX
                      [--active-directory-id ID]
                      [--tenant-id ID]
```

##### Required Parameters

| `--fqdn FQDN\|ALL` | Specifies either a specific fully qualified domain name of a joined Active Directory domain or 'ALL' to query all AD domains to which the cluster is joined. |
| --- | --- |
| `--prefix PREFIX` | Specifies a string prefix to query for groups on the specified domain. |

##### Options

| `--active-directory-id ID` | Specifies the ID of Active Directory configuration under which user domains are searched for. |
| --- | --- |
| `--tenant-id ID` | Limits the search to the tenant specified with the tenant ID. |

##### Example

```plaintext
vcli: admin> group  query-by-prefix --fqdn ad.arandomorg.com --prefix com
+---------------------+--------------------+-----------------+-----------------------------------------------+
| Name                | FQDN               | Identifier type | Identifier                                    |
+---------------------+--------------------+-----------------+-----------------------------------------------+
| Compliance          | ad.arandomorg.com  | sid_str         | S-x-x-xx-xxxxxxxxx-xxxxxxxxxx-xxxxxxxx-xxxxx  |
| common_group_01     | ad.arandomorg.com  | sid_str         | S-x-x-xx-xxxxxxxxx-xxxxxxxxxx-xxxxxxxx-xxxxx  |
+---------------------+--------------------+-----------------+-----------------------------------------------+
```

##### Command Output

| `Name` | Name of a group. |
| --- | --- |
| `FQDN` | Fully qualified domain name of a joined Active Directory domain. |
| `Identifier type` | Identifier attribute. Can be either: - `sid_str`. Group's SID attribute. - `uid_or_gid`. Group's GID attribute. |
| `Identifier` | Identifier of type specified as `Identifier type`. |