Cisco 3.3 User Manual page 280

Advanced User Authentication Settings
•
•
You must configure NDGs from within Interface Configuration before you can
Tip
assign user privilege levels to them.
To select and specify the privilege level for a user, follow these steps:
Perform Step 1 through Step 3 of
Step 1
The User Setup Edit page opens. The username being added or edited is at the top
of the page.
Under TACACS+ Enable Control in the Advanced TACACS+ Settings table,
Step 2
select one of the four privilege options, as follows:
•
•
•
•
If you selected Max Privilege for Any Access Server in Step 2, select the
Step 3
appropriate privilege level from the corresponding list.
User Guide for Cisco Secure ACS for Windows Server
7-34
This is the default setting.
Note
Max Privilege for any AAA Client—Enables you to select from a list the
maximum privilege level that will apply to this user on any AAA client on
which this user is authorized.
Define Max Privilege on a per-Network Device Group Basis—Enables you
to associate maximum privilege levels to this user in one or more NDGs.
For information about privilege levels, refer to your AAA client
Note
documentation.
Use Group Level Setting
No Enable Privilege
Note (No Enable Privilege is the default setting; when setting up an new
user account, it should already be selected.)
Max Privilege for Any Access Server
Define Max Privilege on a per-Network Device Group Basis
Chapter 7
Adding a Basic User Account, page
User Management
7-4.
78-16592-01