Cisco ASA 5505 Configuration Manual page 692

Configuring AAA for System Administrators
Figure 32-1
For commands that are a single word, you must permit unmatched arguments, even if there are no
•
arguments for the command, for example enable or help (see
Figure 32-2
To disallow some arguments, enter the arguments preceded by deny.
•
For example, to allow enable, but not enable password, enter enable in the commands field, and
deny password in the arguments field. Be sure to check the Permit Unmatched Args check box so
that enable alone is still allowed (see
Cisco ASA 5500 Series Configuration Guide using ASDM
32-20
Permitting All Related Commands
Permitting Single Word Commands
Figure
Chapter 32 Configuring Management Access
Figure 32-2).
32-3).
OL-20339-01