Cisco Systems 3.3 Server User Manual


 
Chapter 7 User Management
Advanced User Authentication Settings
7-30
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Step 4 To assign the PIX command authorization set at the group level, select the As
Group option.
Step 5 To assign a particular PIX command authorization set to be effective on any
configured network device, follow these steps:
a. Select the Assign a PIX Command Authorization Set for any network
device option.
b. From the list directly below that option, select the PIX command
authorization set you want applied to this user.
Step 6 To create associations that assign a particular PIX command authorization set to
be effective on a particular NDG, for each association, follow these steps:
a. Select the Assign a PIX Command Authorization Set on a per Network
Device Group Basis option.
b. Select a Device Group and an associated Command Set.
c. Click Add Association.
The associated NDG and PIX command authorization set appear in the table.
Step 7 Do one of the following:
If you are finished configuring the user account options, click Submit to
record the options.
To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Configuring Device-Management Command Authorization for a User
Use this procedure to specify the device-management command authorization set
parameters for a user. Device-management command authorization sets support
the authorization of tasks in Cisco device-management applications that are
configured to use Cisco Secure ACS for authorization. You can choose one of four
options:
None—No authorization is performed for commands issued in the applicable
Cisco device-management application.
Group—For this user, the group-level command authorization set applies for
the applicable device-management application.