Specifications

12-41
Configuring and Managing Interactive Devices
The SHOW PORT CHARACTERISTICS command displays the user-specified
groups, listing them in the field labeled (Current) Groups. Current groups apply
only to those ports with ACCESS set to LOCAL; current groups are ignored for
those ports with ACCESS set to REMOTE.
Current groups (user-specified groups) are stored only in the operational
database. Therefore, users must use the SET PORT command to configure these
groups; users cannot use the DEFINE PORT or CHANGE PORT command.
Current groups are always equal to or a subset of the AUTHORIZED GROUPS. If
a user enters SET PORT GROUPS ALL, the current groups consist of all the
enabled authorized groups.
The access server uses the current groups for these functions:
• Checking authorization when the user enters a CONNECT command on the
access server
• Displaying information with the SHOW NODES and SHOW SERVICES
commands
Example: Assigning User Groups
The following example shows the command for nonprivileged users to assign
groups from among their authorized groups:
Local> SET PORT GROUPS 5
If the authorized groups for the port were groups 4 to 7, the user can only access
group 5 after executing the command. In addition, the SHOW SERVICES
command shows only the information for services and nodes in group 5, and the
SHOW PORT CHARACTERISTICS command shows the groups assigned to the
port in the (Current) Groups field.