Previous Topic: Making Temporary Security Group ChangesNext Topic: Recording and Reviewing Access Attempts


Displaying Rules and Security Group Membership

If you are an authorized system administrator, you can display rules at all levels: system, security group, and user. If you are an authorized security group manager, you can display all the rules that pertain to your security group and its individual members. As a user, you can display rules that pertain to your user ID. You can also find out what security group you belong to.

For example, you need to see which rules have been created that pertain to your user ID, FRAISERC.

To display these rules, enter the RULEMAP command:
vmsecure rulemap

The system responds as follows:

ENTER YOUR LOGON PASSWORD:

Enter a valid password; the system responds as follows:

DEFAULT SYSRULES: ACCEPT FRAISERC AUTOLOG ( HISTORY
OVERRIDE SYSRULES: ACCEPT FRAISERC MEMBER
NICKT USRRULES: ACCEPT FRAISERC LINK * * ( HISTORY

Viewing the rules, you see there is a system default rule allowing FRAISERC to autolog virtual machines. A history statement is entered in the target user ID history information whenever FRAISERC attempts to autolog the target. There is a system override rule allowing FRAISERC to become a temporary member of any security group. User ID NICKT has created a rule allowing FRAISERC to link to any of his minidisks in any link mode with a record of the links being entered in his history information.

Note: For more information about the format of the RULEMAP command, see the Reference Guide.

As another example, to display the name of your security group, enter the following command:

vmsecure group ?