Cisco 3.3 User Manual page 636

Group Mapping by Group Set Membership
If you are mapping a Novell NDS group set, click the name of the Novell NDS
Step 6
tree for which you want to configure group set mappings.
The Group Mappings for NDS Users table appears.
Click Add Mapping.
Step 7
The Create new group mapping for database page opens. The group list displays
group names derived from the external user database.
For each group to be added to the group set mapping, select the name of the
Step 8
applicable external user database group in the group list, and then click Add to
selected.
Note
Tip
The Selected list shows all the groups that a user must belong to in order to be
mapped to a Cisco Secure ACS group.
In the CiscoSecure group list, select the name of the Cisco Secure ACS group to
Step 9
which you want to map users who belong to all the external user database groups
in the Selected list.
Note
Click Submit.
Step 10
The group set you mapped to the Cisco Secure ACS list appears at the bottom of
the database groups column.
User Guide for Cisco Secure ACS for Windows Server
16-8
A user must match all the groups in the Selected list so that Cisco Secure
ACS can use this group set mapping to map the user to a Cisco Secure
ACS group; however, a user can also belong to other groups (in addition
to the groups listed) and still be mapped to a Cisco Secure ACS group.
To remove a group from the mapping, select the name of the group in the
Selected list, and then click Remove from selected.
You can also select <No Access>. For more information about the <No
Access> group, see No Access Group for Group Set Mappings,
page 16-5.
Chapter 16 User Group Mapping and Specification
78-16592-01