Aaa Authorization (Xr-Vm) - Cisco NCS 5000 Series Manual

aaa authorization (XR-VM)

aaa authorization (XR-VM)
To create a method list for authorization, use the aaa authorization command in the XR Config mode. To
disable authorization for a function, use the no form of this command.
aaa authorization {commands| eventmanager| exec| network } {default| list-name} {none| local| group
{tacacs+| radius| group-name}}
no aaa authorization {commands| eventmanager| exec| network } {default| list-name}
Syntax Description
commands
eventmanager
exec
network
default
list-name
none
local
group tacacs+
group radius
group group-name
Command Default
Authorization is disabled for all actions (equivalent to the method none keyword).
Command Modes
XR Config mode
System Security Command Reference for Cisco NCS 5000 Series Routers
12
Configures authorization for all XR EXEC mode shell commands.
Applies an authorization method for authorizing an event manager (fault
manager).
Configures authorization for an interactive (XR EXEC mode) session.
Configures authorization for network services, such as PPP or Internet Key
Exchange (IKE).
Uses the listed authorization methods that follow this keyword as the default list
of methods for authorization.
Character string used to name the list of authorization methods.
Uses no authorization. If you specify none, no subsequent authorization methods
is attempted. However, the task ID authorization is always required and cannot
be disabled.
Uses local authorization. This method of authorization is not available for
command authorization.
Uses the list of all configured TACACS+ servers for authorization.
Uses the list of all configured RADIUS servers for authorization. This method
of authorization is not available for command authorization.
Uses a named subset of TACACS+ or RADIUS servers for authorization as
defined by the aaa group server tacacs+ or aaa group server radius command.
Authentication, Authorization, and Accounting Commands