60-9
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 60 Router Device Administration
AAA Policy Page
Command Authorization Dialog Box
Use the Command Authorization dialog box to define which methods to use when authorizing the EXEC
commands that are associated with a given privilege level. This enables you to authorize all commands
associated with a specific privilege level, from 0 to 15.
Navigation Path
From the AAA Page—Authorization Tab, page60-7, click the Add button beneath the Command
Authorization table.
Related Topics
•Defining AAA Services, page 60-4
•Supported Authorization Types, page 60-2
•Understanding Method Lists, page 60-3
Enable CLI/EXEC
Operations Authorization
When selected, this type of authorization determines whether the user
is permitted to open an EXEC (CLI) session, using the methods defined
in the method list.
When deselected, EXEC authorization is not performed.
Prioritized Method List Defines a sequential list of methods to be queried when authorizing a
user. Enter the names of one or more AAA server group objects (up to
four), or click Select to select them. Use the up and down arrows in the
object selector to define the order in which the selected server groups
should be used. If the object that you want is not listed, click the Create
button to create it.
The device tries initially to authorize users using the first method in the
list. If that method fails to respond, the device tries the next method,
and so on, until a response is received.
Command Authorization settings
Privilege Level The privilege level to which the command authorization definition
applies.
Prioritized Method List The method list to use when authorizing users with this privilege level.
Add button Opens the Command Authorization Dialog Box, page60-9. From here
you can configure a command authorization definition.
Edit button Opens the Command Authorization Dialog Box, page 60-9. From here
you can edit the command authorization definition.
Delete button Deletes the selected command authorization definitions from the table.
Table60-3 AAA Page—Authorization Tab (Continued)
Element Description