HP Systems Insight Manager 7.2 Technical Reference Guide

See the HP Systems Insight Manager Command Line Interface Guide, at http://www.hp.com/go/
insightmanagement/sim/docs, for information about accessing the manpage.
Users and authorizations related information
System groups (CLI)
A system group is a group of systems used solely for authorizations. System groups can be managed
directly from the CLI using the mxngroup command, or they can be managed indirectly through
the GUI.
Managing system groups from the GUI
A system group is created when an authorization is created using a system collection. This system
group is named after the collection with three digits appended, usually 001 (for example, All Racks
001). The system group contains the systems that were displayed during system selection and is
saved when the authorization is created.
NOTE: Any additional changes to the system collection do not affect the system group or
authorizations unless updated by one of the following options.
The content of the system group is updated with the current contents of the collection when:
• Another authorization is created using the collection
• An authorization using the system group is updated
• Using mxngroup from the CLI
In the first two cases, the current contents of the collection appear for verification.
When deleting authorizations, a system group no longer used in any authorization is deleted.
Managing system groups from the CLI using mxngroup
System groups can be created directly using the mxngroup command. When system groups are
created using the CLI, a top-level collection is created and named after the system collection with
three digits appended, usually 001. The collection contains the systems in the system group only
when the system group is first added. Later modifications are not reflected in the collection.
NOTE: Any additional changes to the system group or collection do not affect the other, unless
updated by one of the following options or by using the GUI as previously described. This means
that changes to the collection do not affect authorizations, and changes to the system group do
not affect the collection view unless specifically updated.
The content of the system group can be updated with the current contents of the collection when:
• Another authorization is created using the collection.
• An authorization using the system group is updated.
• Using mxngroup from the CLI by entering:
mxngroup <groupname> -u
CAUTION: This command does not display the systems in the collection. To display the updated
contents of the system group, use mxngroup -lm -g <groupname>.
CAUTION: Setting up a periodic task to dynamically update a system group is not recommended.
A collection based on system attributes can be compromised, adversely affecting authorizations
in HP SIM if those attributes are based on a nonsecure protocol (such as SNMP) or are maintained
by a user with user rights. Additionally, the collection itself can be modified by a user with user
rights, which also adversely affects authorizations.
When deleting authorizations, a system group no longer used in any authorizations is deleted.
226 Operations