[Yandex Cloud documentation](../../index.md) > [Yandex Identity Hub](../index.md) > CLI reference > Overview

# yc organization-manager

Manage Yandex Organization Manager resources

#### Command Usage

Syntax:

`yc organization-manager <group>`

#### Command Tree

- [yc organization-manager federation](federation/index.md) — Manage federations



- [yc organization-manager group](group/index.md) — Manage groups in organizations

  - [yc organization-manager group add-access-binding](group/add-access-binding.md) — Add access binding for the specified group

  - [yc organization-manager group add-labels](group/add-labels.md) — Add labels to specified group

  - [yc organization-manager group add-members](group/add-members.md) — Add members to the specified group

  - [yc organization-manager group create](group/create.md) — Create a group

  - [yc organization-manager group delete](group/delete.md) — Delete the specified group

  - [yc organization-manager group get](group/get.md) — Show information about the specified group

  - [yc organization-manager group list](group/list.md) — List groups

  - [yc organization-manager group list-access-bindings](group/list-access-bindings.md) — List access bindings for the specified group

  - [yc organization-manager group list-effective](group/list-effective.md) — List groups that the subject belongs to within a specific organization.

  - [yc organization-manager group list-members](group/list-members.md) — List members of the specified group

  - [yc organization-manager group list-operations](group/list-operations.md) — List operations for the specified group

  - [yc organization-manager group remove-access-binding](group/remove-access-binding.md) — Remove access binding for the specified group

  - [yc organization-manager group remove-labels](group/remove-labels.md) — Remove labels from specified group

  - [yc organization-manager group remove-members](group/remove-members.md) — Remove members from the specified group

  - [yc organization-manager group set-access-bindings](group/set-access-bindings.md) — Set access bindings for the specified group and delete all existing access bindings if there were any

  - [yc organization-manager group update](group/update.md) — Update the specified group

- [yc organization-manager idp](idp/index.md) — Manage Identity Provider



- [yc organization-manager mfa-enforcement](mfa-enforcement/index.md) — Manage MFA enforcements in organizations

  - [yc organization-manager mfa-enforcement activate](mfa-enforcement/activate.md) — Activate the specified mfa enforcement

  - [yc organization-manager mfa-enforcement create](mfa-enforcement/create.md) — Create mfa enforcement

  - [yc organization-manager mfa-enforcement deactivate](mfa-enforcement/deactivate.md) — Deactivate the specified mfa enforcement

  - [yc organization-manager mfa-enforcement delete](mfa-enforcement/delete.md) — Delete the specified mfa enforcement

  - [yc organization-manager mfa-enforcement get](mfa-enforcement/get.md) — Show information about the specified mfa enforcement

  - [yc organization-manager mfa-enforcement list](mfa-enforcement/list.md) — List mfa enforcements

  - [yc organization-manager mfa-enforcement list-audience](mfa-enforcement/list-audience.md) — List audience for the specified mfa enforcement

  - [yc organization-manager mfa-enforcement list-excluded-audience](mfa-enforcement/list-excluded-audience.md) — List excluded audience for the specified mfa enforcement

  - [yc organization-manager mfa-enforcement update](mfa-enforcement/update.md) — Update the specified mfa enforcement

  - [yc organization-manager mfa-enforcement update-audience](mfa-enforcement/update-audience.md) — Update audience for the specified mfa enforcement

  - [yc organization-manager mfa-enforcement update-excluded-audience](mfa-enforcement/update-excluded-audience.md) — Update excluded audience for the specified mfa enforcement

- [yc organization-manager organization](organization/index.md) — Manage organizations

  - [yc organization-manager organization add-access-binding](organization/add-access-binding.md) — Add access binding for the specified organization

  - [yc organization-manager organization add-labels](organization/add-labels.md) — Add labels to specified organization

  - [yc organization-manager organization bind-access-policy](organization/bind-access-policy.md) — Bind access policy to the specified organization

  - [yc organization-manager organization get](organization/get.md) — Show information about the specified organization

  - [yc organization-manager organization leave](organization/leave.md) — Remove user accounts from the specified organization. Operation is performed by the account that wants to leave.

  - [yc organization-manager organization list](organization/list.md) — List organizations

  - [yc organization-manager organization list-access-bindings](organization/list-access-bindings.md) — List access bindings for the specified organization

  - [yc organization-manager organization list-access-policy-bindings](organization/list-access-policy-bindings.md) — List access policy bindings for the specified organization

  - [yc organization-manager organization list-operations](organization/list-operations.md) — List operations for the specified organization

  - [yc organization-manager organization remove-access-binding](organization/remove-access-binding.md) — Remove access binding for the specified organization

  - [yc organization-manager organization remove-labels](organization/remove-labels.md) — Remove labels from specified organization

  - [yc organization-manager organization set-access-bindings](organization/set-access-bindings.md) — Set access bindings for the specified organization and delete all existing access bindings if there were any

  - [yc organization-manager organization unbind-access-policy](organization/unbind-access-policy.md) — Unbind access policy from the specified organization

  - [yc organization-manager organization update](organization/update.md) — Update the specified organization

- [yc organization-manager oslogin](oslogin/index.md) — Setting up OS Login

  - [yc organization-manager oslogin get-settings](oslogin/get-settings.md) — Show information about OS Login settings for the specified organization.

  - [yc organization-manager oslogin update-settings](oslogin/update-settings.md) — Update OS Login settings for the specified organization.

- [yc organization-manager user](user/index.md) — Manage users in organizations

  - [yc organization-manager user list](user/list.md) — List user accounts of the specified organization

  - [yc organization-manager user remove](user/remove.md) — Remove user accounts from the specified organization

- [yc organization-manager v0](v0/index.md) — Manage Yandex Organization Manager resources



#### Global Flags

#|
||Flag | Description ||
|| `--profile` | `string`

Set the custom configuration file. ||
|| `--debug` | Debug logging. ||
|| `--debug-grpc` | Debug gRPC logging. Very verbose, used for debugging connection problems. ||
|| `--no-user-output` | Disable printing user intended output to stderr. ||
|| `--retry` | `int`

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout. ||
|| `--cloud-id` | `string`

Set the ID of the cloud to use. ||
|| `--folder-id` | `string`

Set the ID of the folder to use. ||
|| `--folder-name` | `string`

Set the name of the folder to use (will be resolved to id). ||
|| `--endpoint` | `string`

Set the Cloud API endpoint (host:port). ||
|| `--token` | `string`

Set the OAuth token to use. ||
|| `--impersonate-service-account-id` | `string`

Set the ID of the service account to impersonate. ||
|| `--no-browser` | Disable opening browser for authentication. ||
|| `--format` | `string`

Set the output format: text (default), yaml, json, json-rest. ||
|| `--jq` | `string`

Query to select values from the response using jq syntax ||
|| `-h`, `--help` | Display help for the command. ||
|#