Cisco 2509 - Router - EN User Manual page 245

Chapter 7 Setting Up and Managing User Accounts
To specify device-management application command authorization for a user,
follow these steps:
Perform Step 1 through Step 3 of
Step 1
Result: The User Setup Edit page opens. The username being added or edited is
at the top of the page.
Scroll down to the TACACS+ Settings table and to the applicable
Step 2
device-management command authorization feature area within it.
To prevent the application of any command authorization for actions performed
Step 3
in the applicable device-management application, select (or accept the default of)
the None option.
Step 4 To assign command authorization for the applicable device-management
application at the group level, select the As Group option.
Step 5 To assign a particular command authorization set that affects device-management
application actions on any network device, follow these steps:
a.
b.
Step 6 To create associations that assign a particular command authorization set that
affects device-management application actions on a particular NDG, for each
association, follow these steps:
a.
b.
c.
78-14696-01, Version 3.1
Select the Assign a device-management application for any network device
option.
Then, from the list directly below that option, select the command
authorization set you want applied to this user.
Select the Assign a device-management application on a per Network Device
Group Basis option.
Select a Device Group and an associated device-management application.
Click Add Association.
Result: The associated NDG and command authorization set appear in the
table.
User Guide for Cisco Secure ACS for Windows Server
Advanced User Authentication Settings
Adding a Basic User Account, page 7-5.
7-31