1    /ATTRIBUTES

       /ATTRIBUTES=(keyword[,...])

    Specifies attributes to be associated with the identifiers.
    Attributes may be added to new or existing identifiers. The
    following are valid keywords:

    DYNAMIC      Allows unprivileged holders of the identifier to
                 remove and to restore the identifier from the
                 process rights list by using the DCL command SET
                 RIGHTS_LIST.

    NOACCESS     Makes any access rights of the identifier null and
                 void. If a user is granted an identifier with the No
                 Access attribute, that identifier has no effect on
                 the user's access rights to objects. This attribute
                 is a modifier for an identifier with the Resource or
                 Subsystem attribute.

    RESOURCE     Allows holders of an identifier to charge disk space
                 to the identifier. Used only for file objects.

    SUBSYSTEM    Allows holders of the identifier to create and
                 maintain protected subsystems by assigning the
                 Subsystem ACE to the application images in the
                 subsystem. Used only for file objects.

    To remove an attribute from the identifier, add a NO prefix
    to the attribute keyword. For example, to remove the Resource
    attribute, specify /ATTRIBUTE=NORESOURCE.

    The default uses the current processes in the rights database.
    Use the command SHOW PROCESS/RIGHTS to see the attributes of the
    current process.

2    /DISABLE

    Removes the identifiers from the process or system rights list.
    You cannot use the /DISABLE qualifier with the /ENABLE qualifier.
    Note that removing more than ten identifiers in a single command
    invocation requires CMKRNL privilege.

3    /ENABLE

    Adds the identifiers to the process or system rights list. You
    cannot use the /ENABLE qualifier with the /DISABLE qualifier.
    Note that adding more than ten identifiers in a single command
    invocation requires CMKRNL privilege.

4    /IDENTIFICATION

       /IDENTIFICATION=pid

    Specifies the process identification (PID) value of the process
    whose rights list is to be modified. The PID is assigned by the
    system when the process is created. When you specify a PID, you
    can omit the leading zeros.

    If you specify the /IDENTIFICATION qualifier, you cannot use the
    /PROCESS qualifier. By default, if neither the /IDENTIFICATION
    nor the /PROCESS qualifier is specified, the current process is
    assumed. You cannot use the /IDENTIFICATION qualifier with the
    /SYSTEM qualifier.

5    /PROCESS

       /PROCESS[=process-name]

    Specifies the name of the process whose rights list is to be
    modified. The process name can contain from 1 to 15 alphanumeric
    characters.

    If you specify the /PROCESS qualifier, you cannot use the
    /IDENTIFICATION qualifier. By default, if neither the /PROCESS
    nor the /IDENTIFICATION qualifier is specified, the current
    process is assumed.

    You cannot use the /PROCESS qualifier with the /SYSTEM qualifier.

6    /SYSTEM

    Specifies that the desired operation (addition or removal of
    an identifier) be performed on the system rights list. You
    cannot use the /SYSTEM qualifier with the /PROCESS or the
    /IDENTIFICATION qualifier.