Cisco 3.3 - Manual (Page 640)

Chapter 16 User Group Mapping and Specification
Group Mapping by Group Set Membership
16-12
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Step 6 Click OK in the confirmation dialog box.
Cisco Secure ACS deletes the selected external user database group mapping
configuration.
Changing Group Set Mapping Order
You can change the order in which Cisco Secure ACS checks group set mappings
for users authenticated by Windows, Novell NDS, and generic LDAP databases.
To order group mappings, you must have already mapped them. For more
information about creating group mappings, see
Creating a Cisco Secure ACS
Group Mapping for Windows, Novell NDS, or Generic LDAP Groups, page 16-7 .
To change the order of group mappings for a Windows, Novell NDS, or generic
LDAP group mapping, follow these steps:
Step 1 In the navigation bar, click External User Databases.
Step 2 Click Database Group Mappings.
Step 3 Click the external user database name for which you want to configure group set
mapping order.
If you are ordering Windows group set mappings, the Domain Configurations
table appears. If you are ordering NDS group set mappings, the NDS Trees table
appears. Otherwise, the Group Mappings for database Users table appears.
Step 4 If you are configuring Windows group mapping order, click the domain name for
which you want to configure group set mapping order.
The Group Mappings for Domain: domainname table appears.
Step 5 If you are configuring Novell NDS group set mapping order, click the name of the
Novell NDS tree for which you want to configure group set mapping order.
The Group Mappings for NDS Users table appears.
Step 6 Click Order mappings.
Note The Order mappings button appears only if more than one group set
mapping exists for the current database.