ADTRAN AOS Version R10.1.0 Command Reference Manual page 878

Command Reference Guide
aaa authorization commands <level>
Use the aaa authorization commands command to create and define a default or named authorization
method list for use with authentication, authorization, and accounting (AAA) authorization services. AAA
command authorization method lists are used to allow or restrict the use of certain commands on a per-user
basis. Use the no form of this command to disable the authorization commands method list. Variations of
this command include:
aaa authorization commands <level> default group tacacs+
aaa authorization commands <level> default group <name>
aaa authorization commands <level> default if-authenticated
aaa authorization commands <level> default none
aaa authorization commands <level> <listname> group tacacs+
aaa authorization commands <level> <listname> group <name>
aaa authorization commands <level> <listname> if-authenticated
aaa authorization commands <level> <listname> none
Each method parameter after default or <listname> specifies the authorization method to
be attempted in the order in which they are to be tried. Multiple methods can be specified
for authorization, but the authorization procedure is dependent upon the entry order of the
methods.
Syntax Description
<level>
<listname>
default
none
if-authenticated
group tacacs+
group <name>
60000CRG0-35E
Specifies whether the method list applies to Level 1 (unprivileged) or Level
15 (privileged) commands.
Creates and names the authorization commands method list to use rather
than the default list.
Creates and defines the default authorization commands method list to use
rather than a named list.
Specifies that no authorization methods are used for command
authorization. If this method is entered, it should come at the end of the list
of authorization methods in the command entry. This method should only be
used to prevent a lock-out situation.
Specifies that authorization is successful if the user has already been
authenticated. AAA authentication must be configured to use this method.
Refer to the Functional Notes for more information.
Specifies using all terminal access controller access-control system plus
(TACACS+) servers for authorizing command usage. TACACS+ servers
must be configured to use this method. Refer to the Functional Notes for
more information.
Specifies using a subset of TACACS+ servers for authorizing command
usage. Subsets are named server groups previously created using the
command aaa group server on page
configured to use this method.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
886. A server group must be
878