Determines whether the Active Directory group is a required group for its members.


bool IsMembershipRequired {get; set;}

Property value

Returns true if the UNIX profile associated with an Active Directory group is marked as a required group.


If this property is true, users cannot use the adsetgroups command to remove the group from the currently active set of groups. If this property is false, users who are members of the group can add or remove the group from their list of active groups at any time.

For more information about making a group required, see the Administrator’s Guide for Linux and UNIX.


IsMembershipRequired throws an InvalidOperationException if there is only a partial profile.


The following code sample illustrates using IsMembershipRequired in a script:

Set objZone = cims.GetZoneByPath("LDAP://CN=research,CN=zones, CN=centrify,CN=program data,DC=sierra,DC=com")
'Get the UNIX group profile you want to work with
set objProfile = objZone.GetGroupUnixProfileByGid(“905”)
'Make this group a required group for its members
Set objProfile.IsMembershipRequired = true