Cisco 2509 - Router - EN User Manual page 196

Configuration-specific User Group Settings
To specify device-management application command authorization for a user
group, follow these steps:
In the navigation bar, click Group Setup.
Step 1
Result: The Group Setup Select page opens.
Step 2 From the Group list, select a group, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top.
Step 3 From the Jump To list at the top of the page, choose TACACS+.
Result: The system displays the TACACS+ Settings table section.
Use the vertical scrollbar to scroll to the device-management application feature
Step 4
area, where device-management application is the name of the applicable Cisco
device-management application.
Step 5 To prevent the application of any command authorization set for the applicable
device-management application, select the None option.
Step 6 To assign a particular command authorization set that affects device-management
application actions on any network device, follow these steps:
a.
b.
Step 7 To create associations that assign a particular command authorization set that
affects device-management application actions on a particular NDG, for each
association, follow these steps:
a.
b.
c.
User Guide for Cisco Secure ACS for Windows Server
6-36
Select the Assign a device-management application for any network device
option.
Then, from the list directly below that option, select the command
authorization set you want applied to this group.
Select the Assign a device-management application on a per Network Device
Group Basis option.
Select a Device Group and a corresponding device-management
application.
Click Add Association.
Result: The associated NDG and command authorization set appear in the
table.
Chapter 6 Setting Up and Managing User Groups
78-14696-01, Version 3.1