anchor.diff:    </tr>
   </table>
   
  -Typically, ASGs applied during the staging lifecycle are more permissive than
  -the ASGs applied during the running lifecycle.
  -This is because staging often requires access to different resources, such as
  -dependencies.
  +Typically, ASGs applied during the staging lifecycle are more permissive than the ASGs applied during the running lifecycle. This is because staging often requires access to different resources, such as dependencies.
   
   You use different commands to apply an ASG to each of the four sets. For more information, see the [Procedures](#procedures) section below.
   
  -<p class="note"><strong>Note:</strong> To apply a staging ASG to apps within a space, you must use cf CLI v6.28.0 or later.
  -</p>
  +<p class="note"><strong>Note:</strong> To apply a staging ASG to apps within a space, you must use cf CLI v6.28.0 or later.</p>
   
   ### <a id='creating-groups'></a> The Structure and Attributes of ASGs
   
  
positive.code: $ cf update-security-group my-asg ~/workspace/my-asg-v2.json
  </pre>
  
  <p class='note'><strong>Note</strong>: Updating an ASG does not affect started apps until you restart them. To restart all of the apps in an org or a space,
  use the <a href="https://github.com/cloudfoundry-incubator/app-restarter">app-restarter</a> cf CLI plugin.
  </p>
  
  ### <a id='unbinding-groups'></a> Unbind ASGs
  
  <p class='note'><strong>Note</strong>: Unbinding an ASG does not affect started apps until you restart them. To restart all of the apps in an org or a space,
  use the <a href="https://github.com/cloudfoundry-incubator/app-restarter">app-restarter</a> cf CLI plugin.
  </p>
  
  To unbind an ASG from the platform-wide staging ASG set, run `cf unbind-staging-security-group SECURITY-GROUP`. Replace `SECURITY-GROUP` with the name of your security group.
  
  
negative.code: 
  ## <a id="process"></a> Process for Administering ASGs
  
  The following table outlines the flow of tasks that the administrator carries out over the lifecycle of ASGs. Procedures for each of these tasks are given in [Managing ASGs with the cf CLI](#procedures) below.
  
  <%= vars.asg_first_time %>
  
  