Using CA IDMS Internal Security › CA IDMS Privileges › Specifying Groups

Specifying Groups

Granting Privileges to a Group

You can grant privileges to a group as well as to individual users. All users in the group hold privileges that you give to the group. Users you add to a group hold all privileges assigned to the group; users you remove from the group lose all group privileges.

Revoking Group Privileges

You cannot revoke a privilege from an individual user if the user belongs to a group that holds the privilege. Rather, you must take one of these steps:

• Drop the user from the group using the ALTER GROUP statement.

  This action removes all privileges the user held as a result of being in the group.

• Remove the privilege from the group.

  This action removes the privilege from all members of the group who hold the privilege as a result of being in the group.