Chapter7 Se tting Up and Managing User Accounts
Advanced User Authentication Settings
7-28
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Step 7 To define the specific Cisco IOS commands and arguments to be permitted or
denied for this user, follow these steps:
a. Select the Per User Command Authorization option.
b. Under Unmatched Cisco IOS commands, select either Permit or Deny.
If you select Permit, the user can issue all commands not specifically listed.
If you select Deny, the user can issue only those commands listed.
c. To list particular commands to be permitted or denied, select the Command
check box and then type the name of the command, define its arguments using
standard permit or deny syntax, and select whether unlisted arguments are to
be permitted or denied.
Warning
This is a powerful, advanced feature and should be completed by an
administrator skilled with Cisco IOS commands. Correct syntax is the
administrator’s responsibility. For information on how CiscoSecure ACS
employs pattern matching in command arguments, see the “About Pattern
Matching” section on page 5-14.
Tip To enter several commands, you must click Submit after specifying a
command. A new command entry box appears below the box you just
completed.
Step 8 Do one of the following:
a. If you are finished configuring the user account options, click Submit to
record the options.
b. To continue to specify the user account options, perform other procedures in
this chapter, as applicable.