destination-security-group

Function

The destination-security-group command specifies the destination security group position to which the user information on the authentication server is imported.

The undo destination-security-group command deletes the specified destination security group position.

Format

destination-security-group security-group-name

undo destination-security-group

Parameters

Parameter	Description	Value
security-group-name	Specifies the destination security group position to which the user information is imported.	The value must be the name of an existing security group. When a user in a non-default authentication domain is specified, the user name must carry @authentication-domain-name. For example, secgroup1@test indicates secgroup1 in the test authentication domain.

Views

Server import policy view

Default Level

2: Configuration level

Usage Guidelines

The destination-security-group command is optional. You can run the destination-security-group, import-type, and server basedn commands to implement the following functions:

After you run the import-type user command, the users in group server basedn and its subgroups are imported to the specified target security group destination-security-group.
After you run the import-type group command, you cannot run the destination-security-group.
After you run the import-type security-group command, you cannot run the destination-security-group.
After you run the import-type user-group command, the users in group server basedn and its subgroups are imported to the specified target security group destination-security-group.
After you run the import-type user-security-group command, you cannot run the destination-security-group.
After you run the import-type all command, you cannot run the destination-security-group.

Example

# Export the user information on the LDAP server to security group abc.

<sysname> system-view
[sysname] user-manage import-policy policy1 from ldap
[sysname-import-policy1] destination-security-group abc