[Yandex Cloud documentation](../../index.md) > [Yandex Identity Hub](../index.md) > [Step-by-step guides](index.md) > Managing users > Viewing user groups

# Viewing user groups

{% note info %}

This guide requires you to use the [CLI](../../cli/index.md) if one or more of the following conditions are true:
* The **Block users from viewing the list of organization members and their details** option is [enabled](hide-user-info.md) in the organization's settings.
* The `organization.denyUserListing` [access policy](../../iam/concepts/access-control/access-policies.md) applies, which prohibits viewing the organization's user list.

{% endnote %}

To view which [groups](../concepts/groups.md) a specific [user](../../overview/roles-and-resources.md#users) belongs to, do the following:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Go to [Yandex Identity Hub](https://center.yandex.cloud/organization).
  1. In the left-hand panel, select ![icon-users](../../_assets/console-icons/person.svg) **Users** and select the user from the list that opens.

      Optionally, use the search bar or filter at the top of the page.
  1. Navigate to the **Groups** tab.

- CLI {#cli}

  If you do not have the Yandex Cloud CLI yet, [install and initialize it](../../cli/quickstart.md#install).

  The folder used by default is the one specified when [creating](../../cli/operations/profile/profile-create.md) the CLI profile. To change the default folder, use the `yc config set folder-id <folder_ID>` command. You can also specify a different folder for any command using `--folder-name` or `--folder-id`. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.

  1. See the description of the CLI command for viewing the user's groups:

     ```bash
     yc organization-manager group list-effective --help
     ```

  1. [Get the user ID](users-get.md).
  
  1. Run this command:

     ```bash
     yc organization-manager group list-effective --subject_id <user_ID>
     ```

     Where `--subject_id` is the user ID you got in the previous step.

- API {#api}

  Use the [Group.ListEffective](../api-ref/Group/listEffective.md) REST API method for the [Group](../api-ref/Group/index.md) resource or the [GroupService/ListEffective](../api-ref/grpc/Group/listEffective.md) gRPC API call.

{% endlist %}