Cisco Servers User Manual page 466

Database Group Mappings
Step 5 If you are mapping a Windows NT/2000 group set, click the domain name for
which you want to configure a group set mapping.
Result: The Group Mappings for Domain: domainname table appears.
If you are mapping a Novell NDS group set, click the name of the Novell NDS
Step 6
tree for which you want to configure group set mappings.
Result: The Group Mappings for NDS Users table appears.
Click Add Mapping.
Step 7
Result: The Create new group mapping for database page opens. The group list
displays group names derived from the external user database.
Step 8 For each group to be added to the group set mapping, select the name of the
applicable external user database group in the group list, and then click Add to
selected.
Note
Tip To remove a group from the mapping, select the name of the group in the
Selected list, and then click Remove from selected.
Result: The Selected list shows all the groups that a user must belong to in order
to be mapped to a Cisco Secure ACS group.
In the CiscoSecure group list, select the name of the Cisco Secure ACS group to
Step 9
which you want to map users who belong to all the external user database groups
in the Selected list.
Note
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
12-16
A user must match all the groups in the Selected list in order for
Cisco Secure ACS to use this group set mapping to map the user to a
Cisco Secure ACS group; however, a user can also belong to other
groups (in addition to the groups listed) and still be mapped to a
Cisco Secure ACS group.
You can also select <No Access>. For more information about the <No
Access> group, see the
section on page 12-14.
Chapter 12 Administering External User Databases
"No Access Group for Group Set Mappings"
78-13751-01, Version 3.0