---
title: Viewing groups
description: Use the group reference right to grant delegated admins the right to see what groups a user is a member of without granting group resource management rights.
component: pingdirectory
version: 11.0
page_id: pingdirectory:delegated_admin_application_guide:pd_da_viewing_groups
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/delegated_admin_application_guide/pd_da_viewing_groups.html
revdate: September 13, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result
---

# Viewing groups

Use the group `reference` right to grant delegated admins the right to see what groups a user is a member of without granting group resource management rights.

## About this task

To grant a delegated admin the group `reference` right:

## Steps

* Run `dsconfig` with the `create-delegated-admin-resource-rights` option.

  ```
  dsconfig create-delegated-admin-resource-rights \
      --rights-name DArights  \
      --rest-resource-type groups  \
      --set enabled:true  \
      --set admin-permission:reference  \
      --set admin-scope:all-resources-in-base
  ```

## Result

The admin can see the user's group memberships on the entry preview's **Group Membership** tab.