Safeguard Reference Manual (G06.24+, H06.03+ )

Security Group Commands
Safeguard Reference Manual—520618-013
13-9
ALTER SECURITY-GROUP Command
ACL. To remove authorities previously granted to user IDs, use the minus-sign (-) form
of access-spec.
sec-group-list
specifies one or more security groups whose existing sec-group-attribute
values are to be changed. All security groups specified must already have
Safeguard authorization records (created with the ADD SECURITY-GROUP
command).
sec-group-list can be either:
sec-group-spec
( sec-group-spec [ , sec-group-spec ] ... )
sec-group-spec
can be either:
SECURITY-ADMINISTRATOR
SYSTEM-OPERATOR
LIKE sec-group-spec
changes the attribute values of sec-group-list to the same as the existing
attribute values for sec-group-spec. For the ACCESS attribute, LIKE adds ACL
entries or adds authorities only to existing entries. It does not replace or delete
ACL entries or authorities.
sec-group-spec
identifies the security group whose existing sec-group-attribute values
are to be assigned to the security group authorization record being changed.
sec-group-spec can be any valid security group name.
sec-group-attribute
changes the existing value of the specified group attribute for the security group
being changed. The sec-group-attribute values are:
OWNER [owner-id]
ACCESS access-spec [ ; access-spec ] ...
AUDIT-ACCESS-PASS [audit-spec]
AUDIT-ACCESS-FAIL [audit-spec]
AUDIT-MANAGE-PASS [audit-spec]
AUDIT-MANAGE-FAIL [audit-spec]
ALTER SECURITY-GROUP sec-group-list [ , ]
{ LIKE sec-group-spec | sec-group-attribute }
[ , sec-group-attribute ] ...