Rules Facility Guide › Security with the Rules Facility › Making Temporary Security Group Changes

Making Temporary Security Group Changes

There may be times when you need to become a temporary member of another security group. This might be appropriate if a particular security group has access privileges that you need to perform a task; for example, link privileges to minidisks with accounting data and reporting programs. To become a temporary member of another security group, you must be included through a MEMBER rule. The security group manager of that group or a system administrator must create the rule to grant you membership privileges.

Note: For more information about the MEMBER rule, see Member Rule.

For example, SALES security group manager SAMM can allow FRAISERC to become a temporary member of that security group by creating the following rule in the SALES security group rules file:

ACCEPT FRAISERC MEMBER

By being included on this MEMBER rule, FRAISERC can become a temporary member of security group SALES.

To become a temporary member of security group SALES, FRAISERC uses the GROUP command to query his current security group membership:

vmsecure group ?

The system responds as follows:

CURRENT SECURITY GROUP IS ‘PUBS’

Now, FRAISERC enters the GROUP command to become a temporary member of security group SALES:

vmsecure group sales

The system responds as follows:

ENTER YOUR LOGON PASSWORD:
USER ‘FRAISERC’ NOW MEMBER OF SECURITY GROUP ‘SALES’

When FRAISERC wants to change his membership back to his default security group, he enters the following command:

vmsecure group

The system responds as follows:

ENTER YOUR LOGON PASSWORD:
USER ‘FRAISERC’ NOW MEMBER OF SECURITY GROUP ‘PUBS’

Note: For complete information about the format of the GROUP command, see the Reference Guide.