1  –  access

 Removes an access control entry (ACE) from the access control set
 (ACS) of a directory and its contents, or from an entire subtree.

 SYNOPSIS

      REMOVE SUBTREE tree-name[...] ACCESS

      principal [EXCLUDE entry-type]

 Arguments

 tree-name

 The name of the topmost directory in the subtree. When used without
 the optional recursion notation, the change applies only to the
 specified directory and and the links and objects in that directory.
 The recursion notation causes the change to additionally apply to
 all child directories and their contents.

 principal

 The principal whose ACE is being removed. Principals can be
 specified as a group name or an individual name in the format
 nodename.user.

 entry-type

 One or more of the following types of entries to exclude from the
 change: objects, links, or directories. Multiple directories can be
 excluded in a single command. Use any combination of the following
 entry-type specifiers, separating multiple arguments with commas:

 objects
 links
 directory directory name

 Description

 This command removes an ACE from the access control set (ACS) of a
 particular directory (and its contents) or from an entire subtree
 of directories. You can use the optional recursion notation (...) to
 modify the ACEs associated with all the child directories (and their
 contents). You can use the optional exclude argument to restrict the
 type of entries affected by this command. You can also use exclude
 with the recursion notation to prevent certain directories from
 being processed.

 ACCESS RIGHTS
 You must have control and write access to the directory you specify
 as well as the contents of the directory. If you use the command
 recursively, you also need control and write access to all child
 directories (and their contents) of the directory you specify.

1.1  –  example

 The following command removes all ACEs that specify the principal
 .pjl.smith from the .admin directory and all its child directories.

 dns> remove subtree .admin... access .pjl.smith

2  –  group_member

 Removes a specified group member from all groups in the specified
 subtree.

 SYNOPSIS

      REMOVE SUBTREE tree-name[...] GROUP MEMBER

      member-name [EXCLUDE DIRECTORY directory-name]

 Arguments

 tree-name

 The name of the topmost directory in the subtree. When used without
 the optional recursion notation, the change applies only to the
 specified directory and and the links and objects in that directory.
 The recursion notation causes the change to additionally apply to
 all child directories (and their contents).

 member-name

 The name of the group member that you want to remove.

 directory-name

 One or more directories and their associated ACEs to exclude
 from the change. Multiple directories can be excluded in a single
 command. Separate multiple arguments with commas.

 Description

 This command removes a specified group member specification from
 all groups in the directory specified in tree-name. If you use
 the recursive notation (...), you can use the optional exclude
 directory directory-name argument to exclude groups named in a
 particular directory (and all its child directories) from group
 member modification. You can exclude multiple directories in a
 single command. Separate multiple exclude directory directory-name
 arguments with commas.

 ACCESS RIGHTS
 You must have control access to the group whose member you intend
 to modify. If you use the command recursively, you must have control
 access to all groups affected by the command.

2.1  –  example

 The following command removes user .pjl.smith from membership in all
 groups named in the .admin directory.

 dns> remove subtree .admin group member .pjl.smith