<command>sg scanner -c "..."</command>: runs the command between double quotes with principal group <systemitem class="groupname">scanner</systemitem>. This may be needed if the user has been newly added to group scanner, and has not logged out and in.