CHAPT ER
6-1
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
6
Setting Up and Managing User Groups
This chapter provides information about setting up and managing user groups in
the Cisco Secure Access Control Server for Windows NT/2000 Servers
Version3.0 (Cisco Secure ACS) to control authorization. Cisco Secure ACS
enables you to group together network users for more efficient administration.
You can establish up to 500 different groups to effect different levels of
authorization. Cisco Secure ACS also supports external database group mapping;
that is, if your external user database distinguishes user groups, these groups can
be mapped into Cisco Secure ACS. And if the external database does not support
groups, you can map all users from that database to a Cisco Secure ACS user
group. For information about external database mapping, see the “Database
Group Mappings” section on page 12-10.
Before you configure Group Setup, it is important to understand how this section
functions. Cisco Secure ACS dynamically builds the Group Setup section
interface depending on the configuration of your network devices and the security
protocols being used. That is, what you see under Group Setup is affected by two
factors:
•Your system configuration
•Your settings in the Interface Configuration section
This chapter contains the following sections:
•User Group Setup Features and Functions, page 6-2—This section is an
overview of the features you find within Group Setup.
•Common User Group Settings, page 6-3—This section details procedures
that you typically would perform regardless of your particular network
security configuration.