Use the get_zone_group_field command to return the value for a specified field from the currently selected zone group stored in memory. The get_zone_group_field command does not query Active Directory for the zone group. If you change field values using ADEdit without saving the zone group to Active Directory, the field value you retrieve using get_zone_group_field won’t match the same field value for the zone group stored in Active Directory.

Zone type

Classic and hierarchical


get_zone_group_field field




This command takes no options.


This command takes the following argument:

Argument Type Description



Required. Specifies the case-sensitive name of the field whose value to retrieve. The possible values are:

  • addn: Returns the distinguished name of the Active Directory group object for the zone group. For example, if the group object is created in the default Users container, this field might return a path similar to CN=pubs‑team,CN=Users,DC=ajax,DC=org.
  • createTime: Returns the time and date this zone group was created (in generalized time format).
  • dn: Returns the distinguished name of the service connection point for the zone group. If the zone is a Services for UNIX (sfu) zone, no value is returned for this field.
  • gid: Returns the numeric identifier for the group.
  • modifyTime: Returns the time and date this zone group was last modified (in generalized time format).
  • name: Returns the group name.
  • required: Returns 1 if the zone group is required for members in this zone, or 0 if the group is not required. Users assigned to a required group cannot remove the group from their active set of groups.

You can also specify AIX extended attributes as the field to get an extended attribute value for a group. Extended attribute fields start with the aix. prefix. For example, the admin extended attribute can be retrieved by specifying aix.admin as the field.

Return value

This command returns a field value. The data type depends on the field specified.


The following example returns the group name.

get_zone_group_field name

If the current group is on AIX, you can get AIX group extended attributes and values. For example, to find out if the current group is an administrative group, you can get the admin extended attribute:

get_zone_group_field aix.admin

Related commands

Before you use this command, you must have a currently selected zone group stored in memory. The following commands enable you to view and manage the zone groups:

After you have a zone group stored in memory, you can use the following commands to work with that zone group:

  • delete_zone_group deletes the selected zone group from Active Directory and from memory.
  • save_zone_group saves the selected zone group with its current settings to Active Directory.
  • set_zone_group_field sets a field value in the currently selected zone group.