NGWS SDK Documentation  

This is preliminary documentation and subject to change.
To comment on this topic, please send us email at ngwssdk@microsoft.com. Thanks!

Changing a code group

Using the –chggroup option it is possible to change the membership condition, associated permission set and exclusive flags. It is possible to change only one,some or all of these code group attributes. The –chggroup option works in a similar fashion to the –addgroup option introduced above. The syntax for the –chggroup option is:

Caspol –chggroup label {mship |pset_name | [-exclusive {on|off}][-levelfinal{on|off}] }

The syntax and meaning of mship,pset_name,exclusive and levelfinal are exactly the same as for the –addgroup option (see “Adding a code group to a code group hierarchy”). Below are some examples that illustrate the use of this option.

This example shows how the code group at label 1.2.1. gets the Zone membership condition Internet:

Caspol –chggroup 1.2.1. –zone Internet

The following example shows how the code group 1.3. gets the Internet permission set associated with it and the group exlusive flag turned off

Caspol –chggroup 1.3. Internet –exclusive off

It is very important to note that changes to a code group can have wide repercussions for security. Use this option with caution.