---
title: Viewing groups
description: "Grant Delegated Admin delegated admins the group reference right to view a user's group memberships without granting group management rights."
component: pingdirectory
version: 10.3
page_id: pingdirectory:delegated_admin_application_guide:pd_da_viewing_groups
canonical_url: https://docs.pingidentity.com/pingdirectory/11.1/delegated_admin_application_guide/pd_da_viewing_groups.html
llms_txt: https://docs.pingidentity.com/pingdirectory/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2023-09-13T00:00:00Z
superseded_by: https://docs.pingidentity.com/pingdirectory/11.1/delegated_admin_application_guide/pd_da_viewing_groups.html
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result
---

# Viewing groups

Use the group `reference` right to grant delegated admins the right to see what groups a user is a member of without granting group resource management rights.

## About this task

To grant a delegated admin the group `reference` right:

## Steps

* Run `dsconfig` with the `create-delegated-admin-resource-rights` option.

  ```
  dsconfig create-delegated-admin-resource-rights \
      --rights-name DArights  \
      --rest-resource-type groups  \
      --set enabled:true  \
      --set admin-permission:reference  \
      --set admin-scope:all-resources-in-base
  ```

## Result

The admin can see the user's group memberships on the entry preview's **Group Membership** tab.