Shell Commands › Group Management › group put (Group Management)--Replace a Local Group's Description and Entire Membership

group put (Group Management)--Replace a Local Group's Description and Entire Membership

Replace a local group's description and entire membership.

Syntax

group put <name> description=<val> [ <principal1> ... <principalN> ]

Parameters

<name>

Name of the local group.

description=<val>

Group description.

<principal>

A group member specified in one of the following formats:

<name>

Local user or group.

/<name>

Global user or group.

<scope>:<type>:<name>

A fully qualified principal name where <scope> is 'global' or 'local', <type> is 'group' or 'user', and <name> is the group or user name.

Examples

group put my-group description='us' local:user:admin

Replace the description of local group 'my-group' and replace the membership such that the only member is local user 'admin'.

group put my-group description='us' admin

Replace the description of local group 'my-group' and replace the membership such that the only member is local user 'admin'.

Notes

• The local group must exist.
• Specified local user and group principals must exist.
• Specified global user principals must have logged in to the grid at some time in the past.
• Specified global group principals must be associated to a global user who has logged in to the grid at some time in the past.

group put_newobj_acl

Replace the entire new object ACL definition associated to a group.

Syntax:

group put_newobj_acl <name> [ <principal>=owner ] [ <principal1>=<val> ... <principalN>=<val> ] [ --test_only | --force ]

Parameters:

<name>

Name of the group; prepend the group name with / to indicate a global group.

<principal>=owner

Set the owner attribute of the new object ACL definition to the specified principal. The principal must be a group.

<principal>=<val>

Add the specified principal to the new object ACL definition with access level <val>. <principal> is in the following form:

<scope>:<type>:<name>

A fully qualified principal name where <scope> is 'global' or 'local', type is 'group' or 'user' and <name> is the group or user name.

Valid access levels are: read, control, configure, and full.

--test_only

Do not replace the new object ACL definition but rather test if the operation can succeed.

--force

Skip prompting the user for verification.

Example:

group put_newobj_acl admin local:group:admin=owner local:group:admin=full

Put the new object ACL definition associated to the local group 'admin'.

Notes:

The owner of a new object ACL definition associated to a group must itself be a group.