anchor.diff:  $ cf unbind-running-security-group my-asg
   </pre>
   
  -To unbind an ASG from a specific space, run `cf unbind-security-group SECURITY-GROUP ORG SPACE`. Replace `SECURITY-GROUP` with the name of your security group. Replace `ORG` and `SPACE` with the org and space where you want to unbind the ASG set.
  +To unbind an ASG from a specific space, run `cf unbind-security-group SECURITY-GROUP ORG SPACE --lifecycle running`. Replace `SECURITY-GROUP` with the name of your security group. Replace `ORG` and `SPACE` with the org and space where you want to unbind the ASG set, and replace `running` with `staging` if you want to unbind from the staging ASG set.
   
   Example:
   <pre class="terminal">
  -$ cf unbind-security-group my-asg my-org my-space
  +$ cf unbind-security-group my-asg my-org my-space --lifecycle staging
   </pre>
   
   ### <a id='deleting-groups'></a>Delete ASGs ##
  
positive.code: 
  You use different commands to apply an ASG to each of the four sets. For more information, see the [Procedures](#procedures) section of this topic.
  
  <p class="note"><strong>Note</strong>: To apply a staging ASG to apps within a space, you must use the Cloud Controller (CC) API. The cf CLI <code>cf bind-security-group</code> command supports space-scoped running ASGs, but not space-scoped staging ASGs.</p>
  
  ### <a id='creating-groups'></a>The Structure and Attributes of ASGs ##
  
  
negative.code: $ cf bind-security-group my-asg my-org my-space
  </pre>
  
  To bind an ASG to a space-scoped staging ASG set, run `cf bind-security-group SECURITY-GROUP ORG SPACE --lifecycle staging`. Replace `SECURITY-GROUP` with the name of your security group. Replace `ORG` and `SPACE` with the org and space where you want to bind the ASG set.
  
  ### <a id='updating-groups'></a>Update ASGs
  
  