NEWGROUP


NEWGROUP

     Creates a new group within an account.  (CM)

SYNTAX


NEWGROUP groupname[.acctname]
[;PASS=[password]]
[;FILES=[filespace]]
[;CPU=[cpu]]
[;CONNECT=[connect]]
[;CAP=[capabilitylist]]
[;ACCESS=[(fileaccess)]]
[;ONVS=volumesetname]
[;HOMEVS=volumesetname]


PARAMETERS


groupname The name of the new group, which must consist of one
to eight alphanumeric characters, beginning with an
alphabetic character.

acctname The account in which the group is to reside. This
parameter is available only to users with system
Manager (SM) capability.

password Group password, used for verifying logon access
only. Default is that no password is assigned.

capabilitylist A list of capability-class attributes, consisting of
any or all of the following IA, BA, PM, MR, DS, or
PH, where

Process Handling = PH
Extra Data Segments = DS
Multiple RINS = MR
Privileged Mode = PM
Interactive Access = IA
Local Batch Access = BA

This list imposes a limit on program files belonging
to the group. A capability cannot be assigned to
the group if it has not been defined for the account
in which the group resides. Default is IA, BA.

filespace Disk storage limit, in sectors, for the permanent
files of the group. You cannot specify a filespace
for a group that is greater than the limits
currently defined for the group's account. Default
is a storage limit equivalent to the account's filespace.

cpu The limit on the total cumulative CPU time, in
seconds, for the group. This limit is checked only
when a job or session is initiated; the limit never
causes a job/session to abort. The maximum value
you may specify with this command is 2,147,483,647
seconds. If the limit is exceeded, users with
account manager capability will be warned when
logging on; other users will be denied access.

The CPU limit for a group cannot be set to a value
greater than the corresponding limit currently
defined for the account in which that group resides.
Default is unlimited CPU time. The counter may be
set to zero with the RESETACCT command.

connect The limit on the total cumulative session
connect time, in minutes, that the group is allowed.
This limit is checked at logon, and whenever the
session initiates a new process. The maximum
value you may specify with this command is
2,147,483,647 minutes. Default is the account
connect limit.

A group's connect limit cannot be specified as
greater than the corresponding limit currently
defined for the account in which the group resides.
Default is unlimited connect time. The counter may
be set to zero with the RESETACCT command.

fileaccess The restriction on file access pertinent to this
group. Default is R,X:ANY; A,W,L,S:AL,GU for the
Public Group (PUB); and R,A,W,L,X,S:GU for all other
groups.

{R} {ANY}
{L} {AC }
{A} [,...] :{GU } [,...]
{W} {AL }
{X} {GL }

where R, L, A, W, X specify modes of access by types
of users (ANY, AC, GU, AL, GL) as follows

R = Read
L = Lock (exclusive file access)
A = Append (implies L)
W = Write (implies A and L)
X = Execute
S = Save

The user types are specified as follows

ANY = Any user
AC = Member of this account only
GU = Member of this group only
AL = Account librarian user only
GL = Group librarian user only

Two or more user or access types may be specified if
they are separated by commas.

ONVS Specifies a particular volume set on which the group
is to be built. You must have Create Volumes (CV)
capability to use this option. The volume set must
be already defined and recognized by the system.

The NEWGROUP command must be specified twice before
files can be created in this group on a mountable
volume set. The first NEWGROUP will build the group
on the system volume set (from which the account is
accessed). The second NEWGROUP will then build
it on the mountable volume set. Create volume
(CV) capability is required to use this parameter.

HOMEVS Sets the home volume set to the set specified by
volumesetname. You must have CV capability to use
this option.

volumesetname Volume set names consist of one (1)
to thirty-two (32) characters, beginning with an
alphabetic character. The remaining characters may
be alphabetic, numeric, the underscore, and periods.

If you specify a volsetname, you must specify the
full name of the volume set.

OPERATION

     Account Managers use the NEWGROUP command to create groups
within their accounts and assign attributes to each. The
attributes assigned to the group may not exceed those permitted
the accounts themselves (defined when the system manager created
the accounts). However, within account limits, the account manager
may redefine the group and user attributes and capabilities, as
well as those of the PUB group.

The PUB group is initially assigned no password and the same
capability class attributes, permanent file space limit, and CPU
time limit as the account. Its initial security grants READ (R)
and EXECUTE (X) access to all users (ANY) who successfully log on
to the account. APPEND (A), WRITE (W), LOCK (L), and SAVE (S)
access is assigned to the Account Librarian (AL) and Group Users
(GU) only.

When a keyword parameter (such as ;PASS=) or keyword parameter
group (such as ;PASS=password) is omitted from the NEWGROUP command,
the default value corresponding to that parameter is assigned.

This command may be issued from a session, job, program, or in
BREAK. Pressing [Break] has no effect on this command. A user
must have account manager (AM) or a higher capability to execute
this command.

NOTE

If you specify volume-related commands or parameters for a volume set
that is not currently mounted, or for an account that does not exist,
MPE/iX will return a corresponding error message.


EXAMPLE(S)

     To create a new group named GROUP1 (on the system volume
set) which will be assigned all default capabilities, enter

NEWGROUP GROUP1

To create a new group named G2 in the account GRIMSBY (on the
system volume set) and give it Process Handling and Multiple
RINs, enter:

NEWGROUP G2.GRIMSBY; CAP=PH,MR

** You must have SM capability **

To create the group LEELA on the nonsystem volume set TIME_LORD,
you must use two parallel commands, as follows:

NEWGROUP leela;cap=ia,ba;HOMEVS=time_lord
NEWGROUP leela;ONVS=time_lord

The first command creates the group on the system volume set, but
also informs the system that the files are to reside on another
volume set that will be the home volume set for the files.

The second command builds the group on the volume set time_lord.

ADDITIONAL INFORMATION

Commands:   NEWACCT, NEWUSER, LISTGROUP, ALTGROUP