Reference Guide › Command Reference › GROUP Command

GROUP Command

Use the GROUP command to allow users to change security groups temporarily. You must have the Rules Facility installed to use this command.

GROUP [groupname | ?] [("Options"]

Options:

[STACK [FIFO | LIFO]]
[FIFO]
[LIFO]

Note: Options can be entered in any order.

Definitions

groupname

Specifies the security group in which to become a temporary member. This group must be defined on a GROUP record in the SECURITY CONFIG file.

?

Displays the name of your current security group.

[STACK [FIFO | LIFO]]

[LIFO]

[FIFO]

Stacks the name of your current security group in your program stack.

Description

The GROUP command is useful for accessing virtual machines and minidisks that belong to a security group other than the user’s default security group. By changing security groups, users’ requests are governed by the rules associated with the new group. The user’s default ACI group will be in effect the next time the user logs on.

The ability to change security group membership is governed by a MEMBER rule in the security group rules file for groupname or in a system rules file. If no rule is found to govern the request, it is rejected.

Each time CA VM:Secure processes a rule, the security group name for the target user ID comes from the directory, and the security group name for the requesting user ID comes from the VMDBK. CA VM:Secure uses these security group names to determine the appropriate security group rules file to process. Therefore, a requesting user ID can still link to a target user ID’s minidisk even if the target user ID temporarily changed security groups.

To return group membership to your default security group (specified on the ACIGROUP statement in your directory entry), specify GROUP without any parameters.

Examples

• To determine your current security group, enter:

  vmsecure group ?
  

• If you are authorized by a MEMBER rule to become a temporary member of group SALES and you want to become one, enter:

  vmsecure group sales
  

• When you are ready to change your membership back to your original security group, enter:

  vmsecure group