Authorization; Exec Authorization Capabilities - Dell Networking N4000 Series Configuration Manual

Authorization

Authorization is used to determine which services the user is allowed to
access. For example, the authorization process may assign a user's privilege
level, which determines the set of commands the user can execute. There are
three kinds of authorization: commands, exec, and network.
• Commands: Command authorization determines which CLI commands
the user is authorized to execute.
• Exec: Exec authorization determines what the user is authorized to do on
the switch; that is, the user's privilege level and an administrative profile.
• Network: Network authorization enables a RADIUS server to assign a
particular 802.1X supplicant to a VLAN. For more information about
802.1X, see "Configuring Port and System Security" on page 503.
Table 10-3 shows the valid methods for each type of authorization:
Table 10-3. Authorization Methods
Method
local
none
radius
tacacs

Exec Authorization Capabilities

Dell Networking switches support two types of service configuration with
exec authorization: privilege level and administrative profiles.
Privilege Level
By setting the privilege level during exec authorization, a user can be placed
directly into Privileged EXEC mode when they log into the command line
interface.
212
Configuring Authentication, Authorization, and Accounting
Commands
no
yes
no
yes
Exec
yes
yes
yes
yes
Network
no
no
yes
no