Cisco 3.3 User Manual
Page 276
Chapter 7 User Management
Advanced User Authentication Settings
7-30
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Step 4
To assign the PIX command authorization set at the group level, select the As
Group option.
Step 5
To assign a particular PIX command authorization set to be effective on any
configured network device, follow these steps:
a.
Select the Assign a PIX Command Authorization Set for any network
device option.
b.
From the list directly below that option, select the PIX command
authorization set you want applied to this user.
Step 6
To create associations that assign a particular PIX command authorization set to
be effective on a particular NDG, for each association, follow these steps:
a.
Select the Assign a PIX Command Authorization Set on a per Network
Device Group Basis option.
b.
Select a Device Group and an associated Command Set.
c.
Click Add Association.
The associated NDG and PIX command authorization set appear in the table.
Step 7
Do one of the following:
•
If you are finished configuring the user account options, click Submit to
record the options.
•
To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Configuring Device-Management Command Authorization for a User
Use this procedure to specify the device-management command authorization set
parameters for a user. Device-management command authorization sets support
the authorization of tasks in Cisco device-management applications that are
configured to use Cisco Secure ACS for authorization. You can choose one of four
options:
•
None—No authorization is performed for commands issued in the applicable
Cisco device-management application.
•
Group—For this user, the group-level command authorization set applies for
the applicable device-management application.