groups have disjoint users

This requirement has no options.

Purpose

Warns when the specified group(s) have users in common across two or more local groups. Immediate group membership searched (non-recursively) and group members are compared.

Notes

This requirement is only useful in sections with wildcards or with multiple local groups listed in the section (or both).

This requirement is useful where one should not give the same person more than one role across role-based local groups.

Examples

# Warns when users are members of more than one of the alpha, beta, or gamma local groups.
[local-group:alpha beta gamma]
groups have disjoint users

Example output

Line 8: The following 2 users are members of multiple groups which should have disjoint membership:

User name	is a member of local groups
DESKTOP-RSL0MVD\jbn	2 groups: alpha, beta
DESKTOP-RSL0MVD\Administrator	2 groups: alpha, gamma