Assigning A User To A Group - Cisco 2509 - Router - EN User Manual

Chapter 7 Setting Up and Managing User Accounts

Assigning a User to a Group

Step 1
Step 2
Tip
Step 3
78-14696-01, Version 3.1
A user can only belong to one group in Cisco Secure ACS. The user inherits the
attributes and operations assigned to his or her group. However, in the case of
conflicting settings, the settings at the user level override the settings configured
at the group level.
By default, users are assigned to the Default Group. Users who authenticate via
the Unknown User method and who are not mapped to an existing
Cisco Secure ACS group are also assigned to the Default Group.
Alternatively, you can choose not to map a user to a particular group, but rather,
to have the group mapped by an external authenticator. For external user
databases from which Cisco Secure ACS can derive group information, you can
associate the group memberships—defined for the users in the external user
database—to specific Cisco Secure ACS groups. For more information, see
Database Group Mappings, page
To assign a user to a group, follow these steps:
Perform Step 1 through Step 3 of
Result: The User Setup Edit page opens. The username being added or edited
appears at the top of the page.
From the Group to which user is assigned list in the User Setup table, select the
group to which you want to assign the user.
Alternatively, you can scroll up in the list to select the Mapped By External
Authenticator option.
Do one of the following:
If you are finished configuring the user account options, click Submit to
•
record the options.
To continue to specify the user account options, perform other procedures in
•
this chapter, as applicable.
12-11.
Adding a Basic User Account, page
User Guide for Cisco Secure ACS for Windows Server
Basic User Setup Options
7-5.
7-9