control: groupdef = ( "groupname:*:105:bob,mike,bill,chris" ) editfiles: any:: { /etc/group BeginGroupIfNoLineMatching '^$(groupdef).*' DeleteLinesMatching "^groupname:.*" Append "$(groupdef)" EndGroup }