System Administration Guide: Naming and Directory Services (NIS+)

Using nischmod to Remove NIS+ Rights

To remove rights for an object or entry use:

For object

nischmod class-right object-name

For entry

nischmod class-right [column-name=value],table-name

For example, to remove create and destroy rights from the group of the directory object you would type:

client% nischmod g-cd

For example to remove destroy rights from group for the name=abe entry in the table, you would type:

client% nischmod g-d '[name=abe],'