Endpoint Administration Guide for UNIX › Managing Users and Groups › Accessor Management › Group Management Using selang

Group Management Using selang

You can change any property of any group, except that you cannot change the name or the membership of enterprise groups (from within CA ControlMinder).

To change group properties or to assign access rights associated with groups, you can use CA ControlMinder Endpoint Management or the following selang commands:

• join[-] and joinx[-]

  Change the membership of an internal group

  Use join to add internal accessors to the group. Use joinx to add enterprise groups and users to an internal group. Use the - (minus) form of the commands to remove accessors.

• editgrp, newgrp, chgrp

  Change the non-membership properties of an internal group

• editxgrp, newxgrp, chxgrp

  Change the non-membership properties of an enterprise group

• rmgrp, rmxgrp

  Remove a user group

Example: Define a Group in the Database Using selang

The following selang command defines a new group “sales” in the database. The full name of the group is “Sales Department”:

newgrp sales name('Sales Department')

Example: Change a Property of a Group Defined in the Database Using selang

The following selang command makes CA ControlMinder audit all events for members of the group AC_admins:

chgrp AC_admins audit(all)

Example: Add an Enterprise Group to an ACL Using selang

The following selang command adds the enterprise group mygroup to the ACL of the myfile:

Authorize FILE (myfile) xgid(mygroup)

Example: Add an Enterprise User to a Group Defined in the Database Using selang

The following selang command adds the enterprise user mydomain\administrator to the group AC_admins which is defined in the database:

joinx mydomain\administrator group(AC_admins)

Example: Add an Enterprise Group to a Group Defined in the Database Using selang

The following selang command adds the enterprise group Guests to the _restricted group:

joinx Guests group(_restricted)