ADTRAN AOS Version R10.1.0 Command Reference Manual page 883

Command Reference Guide
aaa authorization exec
Use the aaa authorization exec command to create and define a default or named authorization method
list for use with authentication, authorization, and accounting (AAA) authorization services. The
authorization exec method list sets the parameters for authorizing access to the Enable mode in the
command line interface (CLI). Use the no form of this command to disable the authorization method list.
Variations of this command include:
aaa authorization exec default group <name>
aaa authorization exec default group tacacs+
aaa authorization exec default if-authenticated
aaa authorization exec default none
aaa authorization exec <listname> group <name>
aaa authorization exec <listname> group tacacs+
aaa authorization exec <listname> if-authenticated
aaa authorization exec <listname> none
Each method parameter after default or <listname> specifies the authorization method to
be attempted in the order in which they are to be tried. Multiple methods can be specified
for authorization, but the authorization procedure is dependent upon the entry order of the
methods.
Syntax Description
default
<listname>
none
if-authenticated
group tacacs+
group <name>
Default Values
By default, AAA authorization for executive CLI privileges is disabled and no authorization method lists are
defined.
60000CRG0-35E
Creates and defines the default authorization method list to use rather than
a named method list.
Creates and names the authorization method list to use rather than the
default list.
Specifies that no authorization methods are used for executive
authorization. If this method is entered, it should come at the end of the list
of authorization methods in the command entry. This method should only be
used to prevent a lock-out situation.
Specifies that authorization is successful if the user has already been
authenticated. AAA authentication must be configured to use this method.
Specifies using all terminal access controller access-control system plus
(TACACS+) servers for authorizing executive CLI privileges. TACACS+
servers must be configured to use this method. Refer to the Functional
Notes for more information.
Specifies using a subset of TACACS+ servers for authorizing executive CLI
privileges. Subsets are named server groups previously created using the
command aaa group server on page
configured to use this method.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
886. A server group must be
883