Cisco 2509 - Router - EN User Manual page 157

Chapter 5 Setting Up and Managing Shared Profile Components
In the Name box, type a name for the command authorization set
Step 4
Note
In the Description box, type a description of the command authorization set.
Step 5
Step 6 If Cisco Secure ACS displays an expandable checklist tree below the Name and
Description boxes, use the checklist tree to specify the actions permitted by the
command authorization set. To do so, follow these steps:
a.
b.
Tip
c.
If Cisco Secure ACS displays additional boxes below the Name and Description
Step 7
boxes, use the boxes to specify the commands and arguments permitted or denied
by the command authorization set. To do so, follow these steps:
a.
b.
Caution Enter the full command word; if you use command abbreviations, authorization
control may not function.
78-14696-01, Version 3.1
The set name can contain up to 32 characters. Names cannot contain the
following characters:
# ? " * > <
Leading and trailing spaces are not allowed.
To expand a checklist node, click the plus (+) symbol to its left.
To enable an action, select its check box. For example, to enable a Device
View action, select the View check box under the Device checklist node.
Selecting an expandable check box node selects all the check boxes
within that node. Selecting the first check box in the checklist tree selects
all check boxes in the checklist tree.
To enable other actions in this command authorization set, repeat Step a and
Step b, as needed.
To specify how Cisco Secure ACS should handle unmatched commands,
select either the Permit or Deny option, as applicable.
The default setting is Deny.
Note
In the box just above the Add Command button, type a command that is to be
part of the set.
User Guide for Cisco Secure ACS for Windows Server
Command Authorization Sets
5-17