This configuration parameter specifies the groups that can use the su command to switch to this user account.

You may enter a list of groups separated by commas, or the keyword ALL or an asterisk (*) to specify all groups. For example:

aix.user.attr.sugroups: admins,unixAdmins,dnsAdmins,enterpriseAdmins

Place an exclamation point in front of a group to exclude it. For example, the following setting specifies all groups except dnsAdmins:

aix.user.attr.sugroups: ALL,!dnsAdmins

This parameter corresponds to the aix.sugroups attribute in the /etc/security.user file.

The default value is ALL, which allows all groups to switch to the user account.