aix.user.attr.sugroups
This configuration parameter specifies the groups that can use the su command to switch to this user account.
You may enter a list of groups separated by commas, or the keyword ALL or an asterisk (*) to specify all groups. For example:
aix.user.attr.sugroups: admins,unixAdmins,dnsAdmins,enterpriseAdmins
Place an exclamation point in front of a group to exclude it. For example, the following setting specifies all groups except dnsAdmins:
aix.user.attr.sugroups: ALL,!dnsAdmins
This parameter corresponds to the aix.sugroups attribute in the /etc/security.user file.
The default value is ALL, which allows all groups to switch to the user account.