Cisco Systems Servers Server User Manual


 
5-15
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter 5 Setting Up and Managing Shared Profile Components
Command Authorization Sets
Adding a Command Authorization Set
To add a command authorization set, follow these steps:
Step 1 In the navigation bar, click Shared Profile Components.
Result: The Shared Profile Components page lists the command authorization set
types available. These always include Shell Command Authorization Sets and
PIX Command Authorization Sets.
Step 2 Click one of the listed command authorization set types, as applicable.
Result: The selected Command Authorization Sets table appears.
Step 3 Click Add.
Result: The applicable Command Authorization Set page appears.
Step 4 In the Name box, type a name for the command authorization set
Note The set name can contain up to 32 characters. Names cannot contain
the following special characters:
# ? " * > <
Leading and trailing spaces are not allowed.
Step 5 In the Description box, type a description of the command authorization set.
Step 6 To specify how Cisco Secure ACS is to handle unmatched commands, select
either the Permit or Deny option, as applicable.
Tip The default setting is Deny.