Cisco Systems XR manual Authorization command, SR-19

Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

authorization

authorization

To enable authentication, authorization, and accounting (AAA) authorization for a specific line or group of lines, use the authorization command in line configuration mode. To disable authorization, use the no form of this command.

authorization {commands exec} {default list-name}

no authorization {commands exec}

Syntax Description	commands	Enables authorization on the selected lines for all commands.
	exec	Enables authorization for an interactive (EXEC) session.
	default	Applies the default method list, created with the aaa authorization command.
	list-name	Specifies the name of a list of authorization methods to use. If no list name is
		specified, the system uses the default. The list is created with the aaa
		authorization command.

Defaults

Command Modes

Command History

Authorization is not enabled.

Line configuration

Release	Modification
Release 2.0	This command was introduced on the Cisco CRS-1.
Release 3.0	No modification.
Release 3.2	This command was supported on the Cisco XR 12000 Series Router.
Release 3.3.0	No modification.

Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

After you use the aaa authorization command to define a named authorization method list (or use the default method list) for a particular type of authorization, you must apply the defined lists to the appropriate lines for authorization to take place. Use the authorization command to apply the specified method lists (or, if none is specified, the default method list) to the selected line or group of lines.

Task ID	Task ID	Operations
	aaa	read, write

Cisco IOS XR System Security Command Reference

SR-19