Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Security Group Commands
Safeguard Reference Manual — 520618-030
13 - 15
ALTER SECURITY-GROUP Command
AUDIT-MANAGE-FAIL [audit-spec]
changes the audit-spec for unsuccessful attempts to manage this
authorization record. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
For a description of the audit-specs, see the
SET SECURITY-GROUP
Command on page 13-25. Omitting audit-spec specifies NONE.
Example
This command transfers ownership of the SECURITY-ADMINISTRATOR security
group to the user with user ID 12,4 and allows all users who are members of group
number 12 to execute the commands restricted to the SECURITY-ADMINISTRATOR
security group. It also allows you to enter text description:
=ALTER SECURITY-GROUP sec-admin, OBJECT-TEXT-DESCRIPTION &
“Record altered”,OWNER 12,4, ACCESS 12,* e
Ownership of a group authorization record can be transferred to another user by the
ALTER command. For example,
=ALTER SECURITY-GROUP SECURITY-OSS-ADMINISTRATOR, &
ACCESS TEST1.USER1 – (E); TEST1.USER4 (E), &
AUDIT-MANAGE ALL
To alter the SECURITY-PRV-ADMINISTRATOR security group to enable auditing of
pass or fail protection record management operations:
=ALTER SECURITY-GROUP SECURITY-PRV-ADMINISTRATOR, AUDIT-MANAGE
ALL
To alter the SECURITY-AUDITOR security group to enable auditing of pass or fail
protection record management operations:
=ALTER SECURITY-GROUP SECURITY-AUDITOR, AUDIT-MANAGE ALL
To alter the SECURITY-MEDIA-ADMIN security group protection record, use the
following command:
=ALTER SECURITY-GROUP SECURITY-MEDIA-ADMIN, ACCESS TEST.MGR E
To alter the SECURITY-PERSIST
ENCE-ADMIN security group protection record, use
the following command:
=ALTER SECURITY-GROUP SECURITY-PERSISTENCE-ADMIN, ACCESS
TEST.USER1 E