</variablelist>
</refsect3>
+<refsect2>
+ <title>service-account group-msa-membership</title>
+ <para>Service account Group MSA Membership management.</para>
+</refsect2>
+
+<refsect3>
+ <title>service-account group-msa-membership show</title>
+ <para>Display Group MSA Membership for a service account.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--json</term>
+ <listitem><para>
+ Return as JSON instead of a list.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account group-msa-membership add</title>
+ <para>Add a principal to Group MSA Membership for a service account.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--principal</term>
+ <listitem><para>
+ Name, DN or SID of principal to add.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account group-msa-membership remove</title>
+ <para>Remove a principal from Group MSA Membership for a service account.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--principal</term>
+ <listitem><para>
+ Name, DN or SID of principal to remove.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
<refsect3>
<title>domain classicupgrade [options] <replaceable>classic_smb_conf</replaceable></title>
<para>Upgrade from Samba classic (NT4-like) database to Samba AD DC