Creating and working with user groups using the CLI

You can use the command-line interface (CLI) to create and work with users and user groups.

1. Issue the svctask mkusergrp CLI command to create a new user group. For example:

   svctask mkusergrp -name group_name -role role_name -remote

   where group_name specifies the name of the user group and role_name specifies the role that is associated with any users that belong to this group. The remote parameter specifies that the group is visible to the remote authentication service.

   The command returns the ID of the user group that was created.

2. Issue the svctask chusergrp CLI command to change attributes of an existing user group. For example:

   svctask chusergrp -role role_name -remote yes | no group_id_or_name

   where role_name specifies the role that is associated with any users that belong to this group and group_id_or_name specifies the group to be changed. The remote parameter specifies whether the group is visible to the authentication server.
3. Issue the svctask rmusergrp CLI command to delete a user group: For example:

   svctask rmusergrp -force group_id_or_name

   where group_id_or_name specifies the group to delete. The force parameter specifies to delete the group even if there are users in the user group. All users that were assigned to this group are assigned to the Monitor group.
4. Issue the svcinfo lsusergrp CLI command to display the user groups that have been created on the cluster. For example:

   svcinfo lsusergrp usergrp_id_or_name

   where group_id_or_name specifies the user group to view. If you do not specify a user group ID or name, all user groups on the cluster are displayed.