Cisco Systems 3.3 Server User Manual


 
6-3
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 6 User Group Management
Basic User Group Settings
If you have configured Cisco Secure ACS to interact with a Cisco
device-management application, new TACACS+ services may appear
automatically, as needed, to support the device-management application. For
more information about Cisco Secure ACS interaction with device-management
applications, see Support for Cisco Device-Management Applications, page 1-19.
You can use the Shell Command Authorization Set feature to configure TACACS+
group settings. This feature enables you to apply shell commands to a particular
user group in the following ways:
Assign a shell command authorization set, which you have already
configured, for any network device.
Assign a shell command authorization set, which you have already
configured, to particular NDGs.
Permit or deny specific shell commands, which you define, on a per-group
basis.
For more information about shell command authorization sets, see Chapter 5,
“Shared Profile Components”.
Basic User Group Settings
This section presents the basic activities you perform when configuring a new
user group.
This section contains the following topics:
Group Disablement, page 6-4
Enabling VoIP Support for a User Group, page 6-4
Setting Default Time-of-Day Access for a User Group, page 6-5
Setting Callback Options for a User Group, page 6-7
Setting Network Access Restrictions for a User Group, page 6-8
Setting Max Sessions for a User Group, page 6-12
Setting Usage Quotas for a User Group, page 6-14