# 1 用户组
> FreeIPA默认有admins、editors、ipausers、trust admins用户组,这里单独创建一个用户组。
```
[root@ipa1 ~]# kinit admin
Password for admin@SYSIT.CN:
[root@ipa1 ~]#
[root@ipa1 ~]# ipa group-add osadmin
---------------------
Added group "osadmin"
---------------------
Group name: osadmin
GID: 1683200003
```
* 或者通过web Ui添加
![title](/api/file/getImage?fileId=5bffb40d3cd7c91e15000256)
# 2 用户
```
[root@ipa1 ~]# ipa user-add osuser1 --first=OS --last=user1 --password
Password:
Enter Password again to verify:
--------------------
Added user "osuser1"
--------------------
User login: osuser1
First name: OS
Last name: user1
Full name: OS user1
Display n