Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Security Group Commands
Safeguard Reference Manual — 520618-030
13 - 10
ALTER SECURITY-GROUP Command
OWNER SUPER.TEST,&
AUDIT-ACCESS NONE,&
AUDIT-MANAGE-PASS ALL,&
ACCESS TEST1.USER1 (E,O); TEST1.USER2 (E); TEST1.USER3(O)
You can add the SECURITY-PRV-ADMINISTRATOR security group protection record:
=ADD SECURITY-GROUP SECURITY-PRV-ADMINISTRATOR, ACCESS SECGRP.*
(E)
You can add the SECURITY-AUDITOR security group protection record:
=ADD SECURITY-GROUP SECURITY-AUDITOR, ACCESS SECGRP.* (E)
You can add the SECURITY-MEDIA-ADMIN security group protection record:
=ADD SECURITY-GROUP SECURITY-MEDIA-ADMIN, OWNER SUPER.SUPER,
ACCESS 255,* *
You can add the SECURITY-PERSISTENCE-ADMIN security group protection record:
=ADD SECURITY-GROUP SECURITY-PERSISTENCE-ADMIN, OWNER
SUPER.SUPER, ACCESS 255,* *
ALTER SECURITY-GROUP Command
ALTER SECURITY-GROUP changes one or more attribute values in a security group
authorization record. Both the owner and the primary owner’s group manager can
change a security group authorization record. In addition, any user ID that has an ACL
entry granting it OWNER authority can also modify the security group authorization
record.
Except for the ACCESS attribute, new group attribute values specified in an ALTER
SECURITY-GROUP command replace the existing attribute values. Specifying a new
ACCESS access-spec adds the new access-spec to the security group’s existing
ACL. To remove authorities previously granted to user IDs, use the minus-sign (-) form
of access-spec.
sec-group-list
specifies one or more security groups whose existing sec-group-attribute
values are to be changed. All security groups specified must already have
Safeguard authorization records (created with the ADD SECURITY-GROUP
command).
ALTER SECURITY-GROUP sec-group-list [ , ]
{ LIKE sec-group-spec | sec-group-attribute }
[ , sec-group-attribute ] ...