Replaces an existing principal with a new principal in all ACEs associated with the subtree you specify. SYNOPSIS CHANGE SUBTREE tree-name[...] ACCESS old-principal new-principal [EXCLUDE entry-type] Arguments tree-name The name of the topmost directory in the subtree. When used without the optional recursion notation (...), the change applies only to the specified directory and the links and objects in that directory. The recursion notation causes the change to additionally apply to all child directories and their contents. old-principal The principal that you want to change. Principals can be specified as a group name or an individual name in the format nodename.username. new-principal The new principal. Principals can be specified as a group name or an individual name in the format nodename.username. entry-type One or more of the following arguments to exclude from principal modification: objects, links, or directories. Multiple directories can be excluded in a single command. Use any combination of the following entry-type specifiers, separating multiple arguments with commas: objects links directory directory-name Description This command changes all relevant access control entries (ACEs) associated with the directory specified in tree-name and all relevant ACEs associated with that directory's contents. You can use the optional recursion notation (...) to modify the ACEs associated with all the child directories and their contents. You can also use the optional exclude argument to restrict the type of entries affected by this command. ACCESS RIGHTS You must have control and write access to the directory you specify as well as to the contents of the directory. If you use the command recursively, you also need control and write access to all child directories (and their contents) of the directory you specify.
1 – example
The following command changes the old principal .pjl.smith to the new principal .ins.smith in all ACEs associated with the .admin directory and its contents. By using the recursion notation (...), the command additionally changes the ACEs of all child directories and their contents. dns> change subtree .admin... access .pjl.smith .ins.smith