Cisco 3.3 - Manual (Page 193)

6-3
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 6 User Group Management
Basic User Group Settings
If you have configured Cisco Secure ACS to interact with a Cisco
device-management application, new TACACS+ services may appear
automatically, as needed, to support the device-management application. For
more information about Cisco Secure ACS interaction with device-management
applications, see
Support for Cisco Device-Management Applications, page 1-19 .
You can use the Shell Command Authorization Set feature to configure TACACS+
group settings. This feature enables you to apply shell commands to a particular
user group in the following ways:
• Assign a shell command authorization set, which you have already
configured, for any network device.
• Assign a shell command authorization set, which you have already
configured, to particular NDGs.
• Permit or deny specific shell commands, which you define, on a per-group
basis.
For more information about shell command authorization sets, see Chapter 5,
“Shared Profile Components” .
Basic User Group Settings
This section presents the basic activities you perform when configuring a new
user group.
This section contains the following topics:
• Group Disablement, page 6-4
• Enabling VoIP Support for a User Group, page 6-4
• Setting Default Time-of-Day Access for a User Group, page 6-5
• Setting Callback Options for a User Group, page 6-7
• Setting Network Access Restrictions for a User Group, page 6-8
• Setting Max Sessions for a User Group, page 6-12
• Setting Usage Quotas for a User Group, page 6-14