Cisco 3.3 - Manual (Page 254)

Chapter 7 User Management
Basic User Setup Options
7-8
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Assigning a User to a Group
A user can only belong to one group in Cisco Secure ACS. The user inherits the
attributes and operations assigned to his or her group. However, in the case of
conflicting settings, the settings at the user level override the settings configured
at the group level.
By default, users are assigned to the Default Group. Users who authenticate via
the Unknown User method and who are not mapped to an existing Cisco Secure
ACS group are also assigned to the Default Group.
Alternatively, you can choose not to map a user to a particular group, but rather,
to have the group mapped by an external authenticator. For external user databases
from which Cisco Secure ACS can derive group information, you can associate
the group memberships—defined for the users in the external user database—to
specific Cisco Secure ACS groups. For more information, see
Chapter 16, “User
Group Mapping and Specification” .
To assign a user to a group, follow these steps:
Step 1 Perform Step 1 through Step 3 of Adding a Basic User Account, page 7-4 .
The User Setup Edit page opens. The username being added or edited appears at
the top of the page.
Step 2 From the Group to which user is assigned list in the User Setup table, select the
group to which you want to assign the user.
Tip Alternatively, you can scroll up in the list to select the Mapped By
External Authenticator option.
Step 3 Do one of the following:
• If you are finished configuring the user account options, click Submit to
record the options.
• To continue to specify the user account options, perform other procedures in
this chapter, as applicable.