7-33
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 7 Setting Up and Managing User Accounts
Advanced User Authentication Settings
Advanced Settings (User)
The information presented in this section applies when you have a AAA client
with configured.
Tip
If the Advanced Settings (User) table does not appear, click Interface
Configuration, click (Cisco IOS), and then click Advanced
Features.
Details on configuring user options with the Advanced Settings are
presented in the following three procedures:
•
Setting Enable Privilege Options for a User, page 7-33
•
Setting Enable Password Options for a User, page 7-35
•
Setting Outbound Password for a User, page 7-36
Setting Enable Privilege Options for a User
You use Enable Control with Exec session to control administrator
access. Typically, you use it for router management control. From the following
four options, you can select and specify the privilege level you want a user to
have.
•
Use Group Level Setting—Sets the privileges for this user as those
configured at the group level.
•
No Enable Privilege—Disallows enable privileges for this user.
Note
This is the default setting.
•
Max Privilege for any AAA Client—Enables you to select from a list the
maximum privilege level that will apply to this user on any AAA client on
which this user is authorized.
•
Define Max Privilege on a per-Network Device Group Basis—Enables
you to associate maximum privilege levels to this user in one or more NDGs.