show x grp Command Display Group Properties
Valid in the AC environment
capamsc141
Valid in the AC environment
The show[x]grp command displays the settings of all the
PAM Server Control
properties of a group record. Optionally, the native environment properties are also shown. The showgrp command also exists in the native environment but operates differently there.
You can execute a show[x]grp command if at least one of the following conditions are true:
- You have at least one of the following attributes: ADMIN, AUDITOR, and OPERATOR.
- You have the GROUP-ADMIN or GROUP-AUDITOR attribute in each group to be listed, or each group to be listed is within the scope of a group in which you have the GROUP-ADMIN attribute.
- You are the owner of the group.
- You are assigned read authority in the access control list of the GROUP record in the ADMIN class.
This command has the following format:
{showgrp|sg} {groupName |groupName [,groupName...] )}\
[addprops(propName[,propName ...])] \ [next] \ [props(all | propName[,propName ...])] \ [useprops(propName[,propName ...])] \ [nt|unix]
- addprops(propName[,propName ...])Defines properties to be added to the ruler for this query only.
- groupNameSpecifies the group whose properties you want to list.groupName can contain wildcard characters.On UNIX, to display the properties of a group whose name contains a special character or space, type an extra slash (/) before the group name.
- nextDisplay parts of the requested data. This option is useful when the query data is larger than the set query size.The maximum query size is determined by the query_size configuration setting. The default query_size is 100.
- ntShows the group's details from the local Windows system in addition to the properties in the database.
- props(all|propName[,propName ...])Defines the ruler for this class for this query and future queries.
- useprops(propName[,propName ...])Defines a ruler for this query only. The class ruler is unaffected.
- unixShows the group's details from the local UNIX system in addition to the properties in the database.
Examples
- The user root wants to display the properties of the security group.
- The user root has the GROUP-ADMIN attribute in the security group.
showgrp security - The user admin wants to display the properties of all enterprise groups.
- The user admin has the ADMIN and AUDITOR attributes.
showxgrp *The properties of all enterprise groups defined toPAM Server Controlare listed.