7-33
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter7 Setting Up and Managing User Accounts Advanced User Authentication Settings
To select and specify the privilege level for a user, follow these steps:
Step 1 Perform Steps 1 through 3 of the “Adding a Basic User Account” section on
page 7-5.
Result: The User Setup Edit page opens. The username being added or edited
appears at the top of the page.
Step 2 Under TACACS+ Enable Control in the Advanced TACACS+ Settings table,
select one of the four privilege options, as follows:
•Use Group Level Setting
•No Enable Privilege
Note (No Enable Privilege is the default setting; when setting up an new
user account, it should already be selected.)
•Max Privilege for Any Access Server
•Define Max Privilege on a per-Network Device Group Basis
Step 3 If you selected Max Privilege for Any Access Server in Step 2, select the
appropriate privilege level from the corresponding list.
Step 4 If you selected Define Max Privilege on a per-Network Device Group Basis in
Step 2, perform the following steps to define the privilege levels on each NDG, as
applicable:
a. From the Device Group list, select a device group.
Note You must have previously configured a device group for it to be
listed.
b. From the Privilege list, select a privilege level to associate with the selected
device group.