C H A P T E R
6-1
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
6
Setting Up and Managing User Groups
This chapter provides information about setting up and managing user groups in
Cisco Secure Access Control Server (Cisco Secure ACS) for Windows Server ve
rsion 3.1 to control authorization. Cisco Secure ACS enables you to group
together network users for more efficient administration. Each user can belong to
only one group in Cisco Secure ACS. You can establish up to 500 different groups
to effect different levels of authorization.
Cisco Secure ACS also supports external database group mapping; that is, if your
external user database distinguishes user groups, these groups can be mapped into
Cisco Secure ACS. And if the external database does not support groups, you can
map all users from that database to a Cisco Secure ACS user group. For
information about external database mapping, see
Database Group Mappings,
page 12-11
.
Before you configure Group Setup, you should understand how this section
functions. Cisco Secure ACS dynamically builds the Group Setup section
interface depending on the configuration of your network devices and the security
protocols being used. That is, what you see under Group Setup is affected by both
your system’s network configuration and your settings in the Interface
Configuration section.
This chapter contains the following sections:
•
User Group Setup Features and Functions, page 6-2
—This section is an
overview of the features you find within Group Setup.
•
Common User Group Settings, page 6-3
—This section details procedures
that you typically would perform regardless of your particular network
security configuration.