Module 4: Users and Groups — Interactive Linux Beginner Reference

Big Idea

Linux is a secure office building 🏢

Beginners often think users and groups are just names. In Linux, they are the base of permissions. Linux asks three questions again and again: Who are you? Which team are you in? Are you allowed to do this?

🧑‍💻

User
An employee who logs in and works in the system.

🪪

UID
The employee ID number Linux actually trusts.

👥

Group / GID
A department/team and its numeric department ID.

🔑

root / sudo
Master key or temporary manager approval for admin work.

Concepts

Users, groups, UID and GID

Linux displays friendly names like student and devops, but internally it tracks numeric IDs. Names are for humans. Numbers are for the operating system.

👤

Users

A user is an account that can own files, run commands, and log in if allowed.

👥

Groups

A group is a team of users. Permissions can be given to a whole group.

#️⃣

UID

User ID. Example: the first normal user is commonly UID 1000 on Ubuntu.

🏷️

GID

Group ID. Every group has a number, just like every user has a UID.

Concept	Beginner meaning	Command to inspect
Current user	The account you are using right now.	`whoami`
UID/GID/groups	Your numeric identity and team memberships.	`id`
User database	Local account records.	`getent passwd username`
Group database	Local group records and members.	`getent group groupname`

✅ Practical rule

When troubleshooting permissions, first run whoami, then id. Those two commands usually explain half the mystery.

Power Tools

root, sudo and su

root is the super administrator. sudo runs one command with admin rights. su switches identity to another user. Useful? Yes. Dangerous? Also yes. Handle like a sharp knife, not a spoon. 🔪

👑

root user

UID 0. Can change system files, create users, install packages, and break things very efficiently.

🛂

sudo

Temporary admin approval for a command, for example sudo useradd testuser.

🎭

su

Switch user. Example: su - testuser starts a login shell as testuser.

Feature	sudo	su
Meaning	Run a command with elevated rights.	Switch to another user account.
Common example	`sudo useradd testuser`	`su - testuser`
Password used	Usually your own password, if you are allowed to sudo.	Usually the target user's password.
Beginner memory line	Borrow power for one task.	Become someone else.

⚠️ Root caution

Do not practise destructive commands as root on a real system. A wrong root command can remove users, damage files, or change permissions across the system.

Interactive

UID/GID identity simulator

Click an identity. Watch how the same concept appears as human-friendly names and numeric IDs.

🧑‍🎓

student

Normal learner account

TypeUser account

UID1000

Primary GID1000(student)

Groupsstudent, sudo

Commandid

Linux Files

Decode /etc/passwd and /etc/group 🔍

These files look scary only because they are compact. Once decoded, they are just structured records.

Example passwd entry

testuser:x:1001:1001::/home/testuser:/bin/sh

Username: the human-friendly account name used to log in or own files.

Safer inspection command

getent passwd testuser

getent asks the system account database. This works better than assuming everything comes only from local files.

Example group entry

devops:x:1002:testuser

Group name: the friendly name of the team or department.

Safer inspection command

getent group devops

This should show the group name, placeholder, GID, and listed members.

Command Superpowers

Command cards ⚡

Each command has a job. Learn the job first; memorization becomes much easier.

🪞 whoami

Shows your current username.

whoami

student

🪪 id

Shows UID, primary GID, and group memberships.

id

uid=1000(student) gid=1000(student) groups=1000(student),27(sudo)

👤 useradd

Creates a new user account.

sudo useradd testuser

No output usually means success.

🔐 passwd

Sets or changes a user's password.

sudo passwd testuser

New password:
Retype new password:
passwd: password updated successfully

👥 groupadd

Creates a new group.

sudo groupadd devops

No output usually means success.

➕ usermod -aG

Adds a user to a supplementary group without removing existing groups.

sudo usermod -aG devops testuser

No output usually means success.
Verify with: id testuser

Guided Hands-on

Lab: Create a user and add them to devops

Run these commands on your Linux VM. Use a lab VM, not a production machine. The expected UID/GID numbers may differ on your system; the names should match.

1

Check who you are

whoami

Expected: your current login name, such as student or jp.

2

Check your UID, GID and groups

id

Look for uid=, gid=, and groups=. If you see sudo, your user can likely run admin commands.

3

Create the lab user

sudo useradd testuser

Expected: usually no output. Silence in Linux often means success. Very dramatic, very Linux.

4

Set password for testuser

sudo passwd testuser

Expected: password prompts. Typed passwords will not appear on screen; that is normal.

5

Create the devops group

sudo groupadd devops

Expected: usually no output. If it says group already exists, continue with verification or choose another group name.

6

Add testuser to devops

sudo usermod -aG devops testuser

Important: use -aG, not just -G. -a means append.

7

Verify the result

id testuser

uid=1001(testuser) gid=1001(testuser) groups=1001(testuser),1002(devops)

Victory condition: devops appears in the groups list.

Optional: inspect account and group databases

getent passwd testuser
getent group devops

These commands verify the records without manually opening system files.

Troubleshooting

Common beginner mistakes 😅

⚠️ Mistake: using -G without -a

Bad: sudo usermod -G devops testuser

Better: sudo usermod -aG devops testuser

-aG appends. Without -a, existing supplementary groups may be replaced.

⏳ Mistake: expecting group changes instantly

For the modified user, group membership may require a new login session to fully apply.

Verification command: id testuser. For your own user, log out and log in again.

🔇 Mistake: thinking no output means failure

Many Linux admin commands print nothing when successful.

Verify instead of guessing: getent passwd testuser and getent group devops.

👑 Mistake: staying root too long

Use sudo for specific tasks instead of living inside a root shell unless you truly need it.

Less time with the master key = fewer accidental disasters.

Final Mission

Boss Battle: Create the DevOps teammate 🎮

Your mission: create testuser, create devops, attach the user to that team, and prove it with id testuser.

Mission checklist

Ran sudo useradd testuser Ran sudo passwd testuser Ran sudo groupadd devops Ran sudo usermod -aG devops testuser Verified devops appears in id testuser

🏆 Mission complete! testuser has joined the devops guild.

Reset Lab

Cleanup commands 🧹

Use these only in your lab VM when you want to remove the practice user and group.

Remove testuser

sudo userdel -r testuser

-r removes the user's home directory and mail spool where applicable.

Remove devops group

sudo groupdel devops

If the group is still a primary group for a user, Linux may refuse to delete it.

Knowledge Check

Quick quiz 🎯

Click an answer and get instant feedback. No exam pressure — just tiny brain push-ups.

Print-friendly

Cheat sheet 🧾

Keep this section handy while teaching or practising.

whoamiShow current username.

idShow current UID, GID, and groups.

id testuserShow identity details of testuser.

sudo useradd testuserCreate a new user.

sudo passwd testuserSet password for testuser.

sudo groupadd devopsCreate a new group.

sudo usermod -aG devops testuserAdd testuser to devops safely.

getent passwd testuserCheck testuser in account database.

getent group devopsCheck devops group and members.

su - testuserSwitch to testuser login shell.

sudo userdel -r testuserRemove lab user and home directory.

sudo groupdel devopsRemove lab group.

Users & Groups
Identity, Power & Teams

Linux ID Card

Linux is a secure office building 🏢

Users, groups, UID and GID

Users

Groups

UID

GID

root, sudo and su

root user

sudo

su

UID/GID identity simulator

student

Decode /etc/passwd and /etc/group 🔍

Example passwd entry

Example group entry

Command cards ⚡

Lab: Create a user and add them to devops

Check who you are

Check your UID, GID and groups

Create the lab user

Set password for testuser

Create the devops group

Add testuser to devops

Verify the result

Common beginner mistakes 😅

Boss Battle: Create the DevOps teammate 🎮

Mission checklist

Cleanup commands 🧹

Quick quiz 🎯

Cheat sheet 🧾