How to programly add external AD user to PSC/vCenter SSO Security Group

Hi experts,

Currently I'm trying to add an external AD user to SSO group by program, but the dir-cli seems not work for the sso group but the local ad group, as below:

'dir-cli group modify --name {group_name} --add {user_account_name} --password {password}'

will response as 'Bad search filter'

Any one know other ways to implement this?

Thanks