Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Security Group Commands
Safeguard Reference Manual — 520618-030
13 - 2
Members of the SECURITY-ADMINISTRATOR security group can execute these
restricted commands:
ALTER SAFEGUARD
STOP SAFEGUARD
ADD EVENT-EXIT-PROCESS
ALTER EVENT-EXIT-PROCESS
DELETE EVENT-EXIT-PROCESS
ADD AUDIT POOL
ALTER AUDIT POOL
ALTER AUDIT SERVICE
DELETE AUDIT POOL
SELECT
ADD TERMINAL
ALTER TERMINAL
DELETE TERMINAL
FREEZE TERMINAL
THAW TERMINAL
Members of the SYSTEM-OPERATOR security group can execute these restricted
commands:
ADD AUDIT POOL
ALTER AUDIT POOL
DELETE AUDIT POOL
NEXTFILE
RELEASE
SELECT
FREEZE TERMINAL
THAW TERMINAL
The SECURITY-OSS-ADMINISTRATOR security group designates a list of users that
are granted additional OSS security management privileges over normal users for the
operations:
acl(ACL_SET)
chown(2)
chmod(2)
chdir(2)
opendir(3)
Membership in the SECURITY
-OSS-ADMINISTRATOR security group are flagged in
the user’s environment during initial logon.
The SECURITY-PRV-ADMINISTRATOR security group designates a list of users that
are granted additional OSS security management privileges over normal users for the
set
filepriv(2) operation.
Membership in the SECURITY
-PRV-ADMINISTRATOR security group are flagged in
the user’s environment during initial logon.
Note. Only the locally authenticated users who are part of the
SECURITY-OSS-ADMINISTRATOR security group are granted the above specified privileges,
not the remotely authenticated users.