---
title: "POST /v2/domains/{domainIdentifier}/group-profiles"
method: POST
path: "/v2/domains/{domainIdentifier}/group-profiles"
---

# POST /v2/domains/{domainIdentifier}/group-profiles

`POST /v2/domains/{domainIdentifier}/group-profiles`

Creates a group profile in Amazon DataZone.

## Path parameters

- `domainIdentifier` string, required

## Request body

- object
  - `groupIdentifier` string — The identifier of the group for which the group profile is created.
  - `rolePrincipalArn` string — The ARN of the IAM role that will be associated with the group profile. This role defines the permissions that group members will assume when accessing Amazon DataZone resources.
  - `clientToken` string — A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.

## Response `201`

Success

- CreateGroupProfileOutput
  - `domainId` string — The identifier of the Amazon DataZone domain in which the group profile is created.
  - `id` string — The identifier of the group profile.
  - `status` 'ASSIGNED' | 'NOT_ASSIGNED' — The status of the group profile.
  - `groupName` string, password — The name of the group for which group profile is created.
  - `rolePrincipalArn` string — The ARN of the IAM role principal. This role is associated with the group profile.
  - `rolePrincipalId` string — The unique identifier of the IAM role principal. This principal is associated with the group profile.

## Other responses

- `480` — InternalServerException
- `481` — ResourceNotFoundException
- `482` — AccessDeniedException
- `483` — ThrottlingException
- `484` — ValidationException
- `485` — UnauthorizedException

---

[API](https://skmtc.net/aws/apis/datazone.md) · [All operations](https://skmtc.net/aws/apis/datazone/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/datazone/revisions/055599054b53/schema)