7-9
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 7 Setting Up and Managing User Accounts
Basic User Setup Options
Assigning a User to a Group
A user can only belong to one group in Cisco Secure ACS. The user inherits the
attributes and operations assigned to his or her group. However, in the case of
conflicting settings, the settings at the user level override the settings configured
at the group level.
By default, users are assigned to the Default Group. Users who authenticate via
the Unknown User method and who are not mapped to an existing
Cisco Secure ACS group are also assigned to the Default Group.
Alternatively, you can choose not to map a user to a particular group, but rather,
to have the group mapped by an external authenticator. For external user
databases from which Cisco Secure ACS can derive group information, you can
associate the group memberships—defined for the users in the external user
database—to specific Cisco Secure ACS groups. For more information, see
Database Group Mappings, page 12-11
.
To assign a user to a group, follow these steps:
Step 1
Perform Step 1 through Step 3 of
Adding a Basic User Account, page 7-5
.
Result: The User Setup Edit page opens. The username being added or edited
appears at the top of the page.
Step 2
From the Group to which user is assigned list in the User Setup table, select the
group to which you want to assign the user.
Tip
Alternatively, you can scroll up in the list to select the Mapped By External
Authenticator option.
Step 3
Do one of the following:
•
If you are finished configuring the user account options, click Submit to
record the options.
•
To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
