show x grp Command Display Group Properties

Valid in the AC environment
capamsc141
Valid in the AC environment
The show[x]grp command displays the settings of all the 
Privileged Access Manager
properties of a group record. Optionally, the native environment properties are also shown.
The showgrp command also exists in the native environment but operates differently there.
You can execute a show[x]grp command if at least one of the following conditions are true:
  • You have at least one of the following attributes: ADMIN, AUDITOR, and OPERATOR.
  • You have the GROUP-ADMIN or GROUP-AUDITOR attribute in each group to be listed, or each group to be listed is within the scope of a group in which you have the GROUP-ADMIN attribute.
  • You are the owner of the group.
  • You are assigned read authority in the access control list of the GROUP record in the ADMIN class.
This command has the following format:
{showgrp|sg} {groupName |groupName [,groupName...] )}\
[addprops(propName[,propName ...])] \ [next] \ [props(all | propName[,propName ...])] \ [useprops(propName[,propName ...])] \ [nt|unix]
  • addprops(
    propName
    [
    ,propName ...
    ])
    Defines properties to be added to the ruler for this query only.
  • groupName
    Specifies the group whose properties you want to list.
    groupName can contain wildcard characters.
    On UNIX, to display the properties of a group whose name contains a special character or space, type an extra slash (/) before the group name.
  • next
    Display parts of the requested data. This option is useful when the query data is larger than the set query size.
    The maximum query size is determined by the query_size configuration setting. The default query_size is 100.
  • nt
    Shows the group's details from the local Windows system in addition to the properties in the database.
  • props(all|
    propName
    [
    ,propName ...
    ])
    Defines the ruler for this class for this query and future queries.
  • useprops(
    propName
    [
    ,propName ...
    ])
    Defines a ruler for this query only. The class ruler is unaffected.
  • unix
    Shows the group's details from the local UNIX system in addition to the properties in the database.
Examples
  • The user root wants to display the properties of the security group.
    • The user root has the GROUP-ADMIN attribute in the security group.
    showgrp security
  • The user admin wants to display the properties of all enterprise groups.
    • The user admin has the ADMIN and AUDITOR attributes.
    showxgrp *
    The properties of all enterprise groups defined to
    Privileged Access Manager
    are listed.