Chapter 3 Setting Up the Cisco Secure ACS HTML Interface
Interface Design Concepts
3-2
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Tip
If a section of the Cisco Secure ACS HTML interface appears to be “missing” or
“broken”, return to the Interface Configuration section and confirm that the
particular section has been activated.
Interface Design Concepts
Before you begin to configure the Cisco Secure ACS HTML interface for your
particular configuration, you should understand a few basic precepts of the
system’s operation. The information in the following sections is necessary for
effective interface configuration.
User-to-Group Relationship
A user can belong to only one group at a time. As long as there are no conflicting
attributes, users inherit group settings.
Note
If a user profile has an attribute configured differently from the same attribute in
the group profile, the user setting always overrides the group setting.
If a user has a unique configuration requirement, you can make that user a part of
a group and set unique requirements on the User Setup page, or you can assign
that user to his or her own group.
Per-User or Per-Group Features
You can configure most features at both group and user levels, with the following
exceptions:
•
User level only—Static IP address, password, and expiration.
•
Group level only—Password aging and time-of-day/day-of-week
restrictions.
