827a1893_V5_9_Management_Guide_ch25_htm__Value
[Keyword] AllowGroups [Description] Can be followed by any number of OpenVMS rights identifier patterns, separated by spaces. Login is allowed only if the users list of rights identifiers contains an identifier that matches one of the patterns. You can use * and ? as wildcards in the patterns. By default, logins as all users are allowed. Note! All other login authentication steps must be completed successfully. DenyGroups is an additional restriction. [Value] 
List
TCPware V5.9 Management Guide ch25.htm
Value