Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

Safeguard Administrator’s Manual—523317-029
3-1
3 Managing User Groups
This section describes how to use the SAFECOM group commands to define and
manage supplementary user groups. Groups created explicitly with the ADD GROUP
command can exist independently of user definitions and are typically used for
file-sharing purposes.
Groups with numbers ranging from 0 through 255 can be used as administrative
groups. An administrative group exists primarily for user management although it can
also be used for file sharing. Groups numbered above 255 cannot be used for user
management. These groups exist solely for file sharing, particularly in the OSS
environment.
Administrative groups can be created in either of two ways. You can use an ADD
USER command to add the first user to a nonexistent group. This action implicitly
creates the administrative group. You can also explicitly create an administrative group
with an ADD GROUP command and later activate that group with an ADD USER
command.
Regardless of the manner in which a group is created, you can use the ALTER
GROUP command to manage that group. For example, you can use the MEMBER
option of an ALTER GROUP command to extend the membership of an administrative
group beyond 256 users for file-sharing purposes.
The attributes in a group definition record allow you to specify the group's name and
number, a text description, the group owner, and a list of group members.
Table 3-1 lists the group commands and gives a brief description of each. These
commands are illustrated in the examples in the remainder of this section.
Note. In prior product versions, GROUP commands were used to manage Safeguard security
groups. GROUP commands are now used to manage file-sharing groups, as described in this
section. Security groups are now managed with the SECURITY-GROUP commands, as
described in Section 6, Managing Security Groups
.
Table 3-1. Group Command Summary
Command Description
ADD GROUP Adds a group definition record with the specified group attribute values.
ALTER GROUP Changes one or more attribute values in a group definition record.
DELETE GROUP Deletes a group definition record.
INFO GROUP Displays the existing attribute values in a group definition record.