Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

Managing Security Groups
Safeguard Administrator’s Manual—523317-029
6-3
Table 6-2 lists and describes the SECURITY-GROUP security commands.
Valid access authorities for groups are:
Note. Until you add the SECURITY-ADMINISTRATOR and SYSTEM-OPERATOR security
groups, any super-group user (user ID 255,n) can use all the commands listed in Table 6-1
.
Table 6-2. SECURITY-GROUP Command Summary
Command Description
ADD SECURITY-GROUP Adds a group authorization record with the specified group
attribute values. If you do not specify attribute values, the
current default is used. By default, only a member of the
local super group can add an authorization record for a
security group.
ALTER SECURITY-GROUP Changes one or more attribute values in a group
authorization record. For all attributes except ACCESS,
the ALTER SECURITY-GROUP command replaces the
current value with the specified value. For the ACCESS
attribute, ALTER SECURITY-GROUP changes the
existing access list to incorporate the access specification.
DELETE SECURITY-GROUP Deletes a group authorization record. Afterward, only local
super-group members can execute the restricted
commands.
FREEZE SECURITY-GROUP Temporarily disables authorities granted to users who
have group access. Then, only the owners of a group
authorization record, the primary owner's group manager,
and the local super ID can execute the restricted
commands.
INFO SECURITY-GROUP Displays the existing attribute values of a group
authorization record.
RESET SECURITY-GROUP Sets one or more default group attribute values to the
predefined values of the SET command.
SET SECURITY-GROUP Sets one or more group attribute values to specified
default values.
SHOW SECURITY-GROUP Displays the current default values of the group attributes.
THAW SECURITY-GROUP Reenables a frozen group. Then user IDs with EXECUTE
authority on the group access list can execute the
restricted commands once again.
EXECUTE Execute the set of commands restricted to the group.
OWNER Manage the group authorization record.