Basic user group settings – Cisco 3.3 User Manual

Page 193

Advertising
background image

6-3

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Chapter 6 User Group Management

Basic User Group Settings

If you have configured Cisco Secure ACS to interact with a Cisco
device-management application, new TACACS+ services may appear
automatically, as needed, to support the device-management application. For
more information about Cisco Secure ACS interaction with device-management
applications, see

Support for Cisco Device-Management Applications, page 1-19

.

You can use the Shell Command Authorization Set feature to configure TACACS+
group settings. This feature enables you to apply shell commands to a particular
user group in the following ways:

•

Assign a shell command authorization set, which you have already
configured, for any network device.

•

Assign a shell command authorization set, which you have already
configured, to particular NDGs.

•

Permit or deny specific shell commands, which you define, on a per-group
basis.

For more information about shell command authorization sets, see

Chapter 5,

“Shared Profile Components”

.

Basic User Group Settings

This section presents the basic activities you perform when configuring a new
user group.

This section contains the following topics:

•

Group Disablement, page 6-4

•

Enabling VoIP Support for a User Group, page 6-4

•

Setting Default Time-of-Day Access for a User Group, page 6-5

•

Setting Callback Options for a User Group, page 6-7

•

Setting Network Access Restrictions for a User Group, page 6-8

•

Setting Max Sessions for a User Group, page 6-12

•

Setting Usage Quotas for a User Group, page 6-14

Advertising