newgroups Token

This token is the replacement for the groups token. Note that praudit does not distinguish between the two tokens as both token IDs are labelled groups when character output is displayed.

The newgroups token records the groups entries from the process's credential. The fields are:

• A token ID field

• A count of the number of groups contained in this audit record.

• Zero or more group entries.

The following figure shows the token format.

Figure B–20 newgroups Token Format

The newgroups token is output only when the audit policy group is active.

A newgroups token is displayed by praudit as follows:

newgroups,1,analysts