HP ProCurve 7102dl Reference Manual page 319

SROS Command Line Interface Reference Guide
aaa authorization commands <level>
Use aaa authorization commands to create (or change) a list of methods for user authorization. For more
detailed information on authentication, authorization, and accounting (AAA) functionality, refer to the
Technology Review section of the command. Use the no form of this command to remove a configured list
of authorization commands. Variations of this command include:
aaa authorization commands <level> default group tacacs+
aaa authorization commands <level> default group <groupname>
aaa authorization commands <level> default if-authenticated
aaa authorization commands <level> default none
aaa authorization commands <level> <listname> group tacacs+
aaa authorization commands <level> <listname> group <groupname>
aaa authorization commands <level> <listname> if-authenticated
aaa authorization commands <level> <listname> none
Syntax Description
<level>
<listname>
default
none
if-authenticated
group <groupname>
group tacacs+
Default Values
By default, the authorization list named default is the default list used to authorize commands when no
other list is assigned.
Usage Examples
The following command creates a list called myList to authorize unprivileged commands (which succeeds
only if the user has been authenticated successfully):
ProCurve(config)#aaa authorization commands 1 myList if-authenticated
The following command uses the default list to authorize privileged (level 15) commands against the
defined TACACS+ servers:
ProCurve(config)#aaa authorization commands 15 default group tacacs+
5991-2114
Specifies the command's enable level. Only level 1 (unprivileged) and level
15 (privileged) commands are supported.
Specifies the name of the authorization list.
Specifies the default authorization list and applies it implicitly across all
lines.
Grants access automatically.
Succeeds if user has authenticated.
Uses the specified group of remote servers for authorization.
Uses all defined TACACS+ servers for authorization.
© Copyright 2007 Hewlett-Packard Development Company, L.P.
Global Configuration Mode Command Set
317