Chapter 7 User Management
Advanced User Authentication Settings
7-30
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Step 4 To assign the PIX command authorization set at the group level, select the As
Group option.
Step 5 To assign a particular PIX command authorization set to be effective on any
configured network device, follow these steps:
a. Select the Assign a PIX Command Authorization Set for any network
device option.
b. From the list directly below that option, select the PIX command
authorization set you want applied to this user.
Step 6 To create associations that assign a particular PIX command authorization set to
be effective on a particular NDG, for each association, follow these steps:
a. Select the Assign a PIX Command Authorization Set on a per Network
Device Group Basis option.
b. Select a Device Group and an associated Command Set.
c. Click Add Association.
The associated NDG and PIX command authorization set appear in the table.
Step 7 Do one of the following:
• If you are finished configuring the user account options, click Submit to
record the options.
• To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Configuring Device-Management Command Authorization for a User
Use this procedure to specify the device-management command authorization set
parameters for a user. Device-management command authorization sets support
the authorization of tasks in Cisco device-management applications that are
configured to use Cisco Secure ACS for authorization. You can choose one of four
options:
• None—No authorization is performed for commands issued in the applicable
Cisco device-management application.
• Group—For this user, the group-level command authorization set applies for
the applicable device-management application.