> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/aws-entities/aws-sso-group.md).

# SSO Group

### AWS SSO Group Fields

| Field           | Type   | Possible Operators                                             | Description                                                                                                                    |
| --------------- | ------ | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| Guid            | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the SSO group's unique ID.                      |
| FSName          | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the DisplayName and the Identity Store ID.                                |
| DisplayName     | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The group's display name.                                                                                                      |
| Description     | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The group description, if one is set.                                                                                          |
| GroupId         | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The Identity Store group identifier assigned by AWS.                                                                           |
| IdentityStoreId | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The identity store the group belongs to (e.g., `d-1234567890`).                                                                |
| AccountId       | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The account that hosts the Identity Center instance the group belongs to.                                                      |
| AWSTier         | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Privilege tier of the group based on the effective permissions its members inherit. Higher values indicate greater privilege.  |
| ExposurePoint   | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on how many other entities can reach this group through attack paths. |
| risk            | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the group calculated based on vulnerability counts and severities.                                           |