alter group { GROUP-NAME { rename to GROUP-NAME |comment COMMENT-STRING |set sss_mode |revoke filter FILTER-NAME } |all set sss_mode }