Safeguard Administrator's Manual (G06.24+, H06.03+)

Managing Security Groups
Safeguard Administrator’s Manual—523317-013
6-2
Table 6-2 lists and describes the SECURITY-GROUP security commands.
ADD EVENT-EXIT-PROCESS Yes No
ALTER EVENT-EXIT-PROCESS Yes No
DELETE EVENT-EXIT-PROCESS Yes No
ALTER SAFEGUARD Yes No
STOP SAFEGUARD Yes No
Note. Until you add the SECURITY-ADMINISTRATOR and SYSTEM-OPERATOR security
groups, any super-group user (user ID 255,n) can use all the commands listed in Table 6-1
.
Table 6-2. SECURITY-GROUP Command Summary (page 1 of 2)
Command Description
ADD SECURITY-GROUP Adds a group authorization record with the specified group
attribute values. If you do not specify attribute values, the
current default is used. By default, only a member of the
local super group can add an authorization record for a
security group.
ALTER SECURITY-GROUP Changes one or more attribute values in a group
authorization record. For all attributes except ACCESS,
the ALTER SECURITY-GROUP command replaces the
current value with the specified value. For the ACCESS
attribute, ALTER SECURITY-GROUP changes the
existing access list to incorporate the access specification.
DELETE SECURITY-GROUP Deletes a group authorization record. Afterward, only local
super-group members can execute the restricted
commands.
FREEZE SECURITY-GROUP Temporarily disables authorities granted to users who
have group access. Then, only the owners of a group
authorization record, the primary owner's group manager,
and the local super ID can execute the restricted
commands.
INFO SECURITY-GROUP Displays the existing attribute values of a group
authorization record.
RESET SECURITY-GROUP Sets one or more default group attribute values to the
predefined values of the SET command.
Table 6-1. Security Groups and Restricted Commands (page2of2)
Command
SECURITY-
ADMINISTRATOR
SYSTEM-
OPERATOR