@@ -154,6 +154,26 @@ Because of technical limitations, column group names may contain only [printable
Once a column group has been created, use the [`pepcli ama column`](#ama-column) subcommand to determine which columns are included in the group. `Access Administrator` can [grant access to column groups](Access-control#access-rules) using the `pepcli ama cgar` subcommand.
### `ama group`
The `group` subcommand allows `Data Administrator` to create and remove participant groups:
```
pepcli ama group create <participant group name>
pepcli ama group remove <participant group name>
```
The `group` subcommand also allows to add and remove participants to and from participant groups:
```
pepcli ama group addTo <participant group name> <participant>
pepcli ama group removeFrom <participant group name> <participant>
```
There are multiple ways to specify `<participant>`:
- A PEP-id
- A _local pseudonym_. This is the pseudonym that is used as directory name, when doing `pepcli pull`
- A _user pseudonym_ . This is a shorter version, derived from _local pseudonym_
### `ama query`
The `query` subcommand summarizes the current state of PEP's [data structure](Data-structure) and [access rules](Access-control#access-rules). Both the `Access Administrator` and `Data Administrator` roles can invoke:
