Cisco 3.3 - Manual (Page 278)

Chapter 7 User Management
Advanced User Authentication Settings
7-32
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Step 5 To assign a particular command authorization set that affects device-management
application actions on any network device, follow these steps:
a. Select the Assign a device-management application for any network device
option.
b. Then, from the list directly below that option, select the command
authorization set you want applied to this user.
Step 6 To create associations that assign a particular command authorization set that
affects device-management application actions on a particular NDG, for each
association, follow these steps:
a. Select the Assign a device-management application on a per Network Device
Group Basis option.
b. Select a Device Group and an associated device-management application.
c. Click Add Association.
The associated NDG and command authorization set appear in the table.
Step 7 Do one of the following:
• If you are finished configuring the user account options, click Submit to
record the options.
• To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Configuring the Unknown Service Setting for a User
If you want TACACS+ AAA clients to permit unknown services, you can select
the Default (Undefined) Services check box under Checking this option will
PERMIT all UNKNOWN Services.
To configure the Unknown Service setting for a user, follow these steps:
Step 1 Perform Step 1 through Step 3 of Adding a Basic User Account, page 7-4 .
The User Setup Edit page opens. The username being added or edited is at the top
of the page.
Step 2 Scroll down to the table under the heading Checking this option will PERMIT all
UNKNOWN Services.