Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 462

JUNOSe 11.1.x System Basics Configuration Guide
aaa authorization
NOTE: For information about TACACS+, see JUNOSe Broadband Access Configuration
Guide.
aaa authorization config-commands
432
Vty Line Authentication and Authorization
Use the no version to remove the authentication list from your configuration.
See aaa authentication login.
Use to set the parameters that restrict access to a network.
Use the keyword exec to determine if the user is allowed to run Exec mode
commands. The commands that you can execute from Exec mode provide only
user-level access.
Use the keyword commands to run authorization for all commands at the
specified privilege level (0–15). See Table 45 on page 421 for a description of
privilege levels.
You can enter up to three authorization types to use in an authorization method
list. Options include: if-authenticated, none, and tacacs+.
Authorization method lists define the way authorization is performed and the
sequence in which the methods are performed. You can designate one or more
security protocols in the method list to be used for authorization. If the initial
method fails, the next method in the list is used. The process continues until
either there is successful communication with a listed authorization method or
all methods defined are exhausted.
Example
host1(config)#aaa authorization exec
Use the no version to delete the method list.
See aaa authorization.
Use to reestablish the default created when the aaa authorization commands
command was issued.
After the aaa authorization commands command has been issued, aaa
authorization config-commands is enabled by default, which means that all
configuration commands are authorized.
Example
host1(config)#aaa new-model
host1(config)#aaa authorization command 15 parks tacacs+ none
host1(config)#no aaa authorization config-commands
Use the no version to disable AAA configuration command authorization.
See aaa authorization config-commands.