60-34
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 60 Router Device Administration
HTTP Policy Page
Command Authorization Override Dialog Box
Use the Command Authorization Override dialog box to define which methods to use when authorizing
the EXEC commands that are associated with a given privilege. This enables you to authorize all
commands associated with a specific privilege level, from 0 to 15.
Navigation Path
From the HTTP Page—AAA Tab, page60-32, click the Add button beneath the Command
Authorization Override table.
Related Topics
•HTTP Policy Page, page 60-31
•AAA Policy Page, page 60-6
Field Reference
Prioritized Method List Applies only when the Enable CLI/EXEC Operations Authorization
check box is selected.
Defines a sequential list of methods to be queried when authorizing a
user to open an EXEC (CLI) session. Enter the names of one or more
AAA server group objects (up to four), or click Select to select them.
Use the up and down arrows in the object selector to define the order in
which the selected server groups should be used. If the object that you
want is not listed, click the Create button to create it.
The device tries initially to authorize users using the first method in the
list. If that method fails to respond, the device tries the next method,
and so on, until a response is received.
Note If you select None as a method, it must appear as the last
method in the list.
Command Authorization settings
Privilege Level The privilege level to which the command authorization definition
applies.
Prioritized Method List The method list to use when aut horizing users with this privilege level.
Add button Opens the Command Authorization Override Dialog Box, page 60-34.
From here you can configure a command authorization definition.
Edit button Opens the Command Authorization Override Dialog Box, page 60-34.
From here you can edit the command authorization definition.
Delete button Deletes the selected command authorization definitions from the table.
Table60-14 HTTP Page—AAA Tab (Continued)
Element Description
Table60-15 Command Authorization Dialog Box
Element Description
Privilege Level The privilege level for which you want to define a command accounting
list. Valid values range from 0 to 15.