GROUP User Exit

Use the GROUP user exit to:

Restrict removal of a user ID from a security group

GROUP userid userid2 mgrid account [groupname | *]

userid: The user ID invoking the command.
Userid2: The user ID whose security group membership is being changed, added, or removed.
mgrid: The directory manager of userid2.
account: The primary account number of userid2.
groupname
*: The security group name to be validated. An asterisk for a group name means that the group name should be determined by the exit. If groupname is omitted, the caller is attempting to remove the user ID from its current security group.

The following table describes the return codes:

Return Code	Meaning
0	Security group name is stacked. If the user exit stacks a null line, the caller should remove the user ID from the security group.
8	Security group name is invalid, indeterminable, or the user ID should not be removed from the security group, and a message is stacked; the length limit of the message is 67 bytes.

The following macros call the GROUP user exit:

Called by	Optimized Macro Name	Under These Circumstances
VMXADDNT	ADDENTRY	A new user ID is created using the ADDENTRY command
VMXGAC00	GENACI	The GENACI command passes an asterisk as the security group name
VMXMAI20	MAI00020	A new user ID is created using the MAINT MANAGE command
VMXMAN20	MAN00020	A new user ID is created using the MANAGE command
VMXREPNT	REPENTRY	A user ID is being changed using the REPENTRY command