Chapter 6 Setting Up and Managing User Groups
Configuration-specific User Group Settings
6-32
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Step 3
From the Jump To list at the top of the page, choose .
Result: The system displays the Settings table section.
Step 4
Use the vertical scrollbar to scroll to the Shell Command Authorization Set
feature area.
Step 5
To prevent the application of any shell command authorization set, select (or
accept the default of) the None option.
Step 6
To assign a particular shell command authorization set to be effective on any
configured network device, follow these steps:
a.
Select the Assign a Shell Command Authorization Set for any network
device option.
b.
Then, from the list directly below that option, select the shell command
authorization set you want applied to this group.
Step 7
To create associations that assign a particular shell command authorization set to
be effective on a particular NDG, for each association, follow these steps:
a.
Select the Assign a Shell Command Authorization Set on a per Network
Device Group Basis option.
b.
Select a Device Group and a corresponding Command Set.
Tip
You can select a Command Set that will be effective for all Device
Groups, that are not otherwise assigned, by assigning that set to the
<default> Device Group.
c.
Click Add Association.
Result: The associated NDG and shell command authorization set appear in
the table.
Step 8
To define the specific Cisco IOS commands and arguments to be permitted or
denied at the group level, follow these steps:
a.
Select the Per Group Command Authorization option.
b.
Under Unmatched Cisco IOS commands, select either Permit or Deny.
If you select Permit, users can issue all commands not specifically listed. If
you select Deny, users can issue only those commands listed.
