Replaces an existing group member's principal specification with a new group member's principal specification in all access control groups named in the directory or subtree that you specify. SYNOPSIS CHANGE SUBTREE tree-name[...] GROUP MEMBER old-member new-member [EXCLUDE DIRECTORY directory-name] Arguments tree-name The name of the topmost directory in the subtree. When used without the optional recursion notation, the change applies only to groups in the specified directory. The recursion notation causes the change to additionally apply to groups in all child directories. old-member The name of the existing group member that you want to replace. new-member The new name of the group member. directory-name One or more directories that contain groups you want to exclude from this change. Multiple directories can be excluded in a single command. Separate multiple arguments with commas. Description This command replaces an existing group member's principal specification with a new group member's principal specification in all access control groups named in the directory or subtree that you specify. Use the recursion notation (...) to extend the command's effect to the groups contained in all child directories of that directory. If you use the command recursively, you can use the optional exclude directory directory-name argument to exclude groups named in a particular directory (and all its child directories) from group member modification. You can exclude multiple directories in a single command. Separate multiple exclude directory directory-name arguments with commas. Access Rights You must have control access to the group whose member you intend to change. If you use the command recursively, you must have control access to all groups affected by the command.
1 – example
The following command replaces the old member .pjl.smith with new member .jmh.smith in all groups in the .admin directory and its child directories. dns> change subtree .admin... group member .pjl.smith .jmh.smith