selang Reference Guide › selang Commands › selang Commands in the AC Environment › show[x]grp Command—Display Group Properties

show[x]grp Command—Display Group Properties

Valid in the AC environment

The show[x]grp command displays the settings of all the CA Access Control properties of a group record. Optionally, the native environment properties are also shown.

Note: The showgrp command also exists in the native environment but operates differently there.

You can execute a show[x]grp command if at least one of the following conditions is true:

• You have at least one of the following attributes: ADMIN, AUDITOR, and OPERATOR.
• You have the GROUP‑ADMIN or GROUP‑AUDITOR attribute in each group to be listed, or each group to be listed is within the scope of a group in which you have the GROUP‑ADMIN attribute.
• You are the owner of the group.
• You are assigned read authority in the access control list of the GROUP record in the ADMIN class.

This command has the following format:

{showgrp|sg} {groupName |groupName [,groupName...] )} \

[addprops(propName[,propName ...])] \
[next] \
[props(all | propName[,propName ...])] \
[useprops(propName[,propName ...])] \
[nt|unix]

addprops(propName [,propName ...])

Defines properties to be added to the ruler A ruler is a list of properties to be displayed. Each class has one ruler. If a ruler is defined for a class, when you request a list of property values for a record (for example with a selang show command), by default CA Access Control only shows the properties defined in the ruler. for this query only.

groupName

Specifies the group whose properties you want to list.

groupName can contain wildcard CA Access Control recognizes wildcard characters for some names. Where it does so, the wildcards it recognizes are * and ?. The * character represents any number of any characters, including no characters; the ? character represents one instance of any character. characters.

On UNIX, to display the properties of a group whose name contains a special character or space, type an extra slash (/) before the group name.

next

Display parts of the requested data. This option is useful when the query data is larger than the set query size.

The maximum query size is determined by the query_size configuration setting. The default query_size is 100.

nt

Shows the group's details from the local Windows system in addition to the properties in the database.

props(all|propName [,propName ...])

Defines the ruler A ruler is a list of properties to be displayed. Each class has one ruler. If a ruler is defined for a class, when you request a list of property values for a record (for example with a selang show command), by default CA Access Control only shows the properties defined in the ruler. for this class for this query and future queries.

useprops(propName [,propName ...])

Defines a ruler A ruler is a list of properties to be displayed. Each class has one ruler. If a ruler is defined for a class, when you request a list of property values for a record (for example with a selang show command), by default CA Access Control only shows the properties defined in the ruler. for this query only. The class ruler is unaffected.

unix

Shows the group's details from the local UNIX system in addition to the properties in the database.

Examples

• The user root wants to display the properties of the security group.
  • The user root has the GROUP‑ADMIN attribute in the security group.

    showgrp security
    

• The user admin wants to display the properties of all enterprise groups.
  • The user admin has the ADMIN and AUDITOR attributes.

    showxgrp *
    

  The properties of all enterprise groups defined to CA Access Control are listed.

More information:

ch[x]grp Command—Change Group Properties

rm[x]grp Command—Delete Group Records

showgrp Command—Display Native Group Properties