Setting the Rational ClearCase primary group

Although you can designate a user’s primary group by using various Windows® domain account maintenance tools, that group name is not always returned when an application requests the name of a user’s primary group (unless the user is a member of only one domain group).

Rational® ClearCase® users who are members of multiple domain groups must set the user environment variable CLEARCASE_PRIMARY_GROUP to the domain-qualified name of the Rational ClearCase users group (for example, NT_WEST\clearusers). This guarantees an unambiguous definition of the group that Rational ClearCase considers the user’s primary group. Rational ClearCase users who are members of a single domain group do not have to take this step.
Note: CLEARCASE_PRIMARY_GROUP must be a user environment variable. It cannot be a system environment variable.
The value of CLEARCASE_PRIMARY_GROUP is used only when evaluating a user’s rights to access a VOB. It has no other security or access-control implications. Users who are members of multiple groups but have not set CLEARCASE_PRIMARY_GROUP correctly are likely to have problems creating elements or otherwise accessing VOBs, especially in complex domain configurations.
Note: Members of the Rational ClearCase users group who are also members of the Rational ClearCase administrators group must set CLEARCASE_PRIMARY_GROUP to the name of the Rational ClearCase users group, not the name of the Rational ClearCase administrators group.

To verify that CLEARCASE_PRIMARY_GROUP has been properly set:

  1. Click Start > Programs > IBM Rational > IBM Rational ClearCase > Administration > ClearCase Doctor.
  2. Click Start Analysis.
  3. When the analysis is finished, click the Topics page and open the User Login Account folder.
  4. Double-click Primary Group, read the user’s primary group, and verify that it is correct.

Feedback