User Guide for Cisco Secure Access Control Server - Stewing Home

Command Authorization Sets
4-30
User Guide for Cisco Secure Access Control Server 4.2
Chapter 4 Shared Profile Components
Caution Enter the full command; if you use command abbreviations, authorization control might not function.
Note Enter only the command portion of the command/argument string here. Arguments are
added only after the command is listed. For example, with the command/argument string
show run you would type only the command show.
c. Click Add Command.
The typed command is added to the command list box.
d. To add an argument to a command, in the Command List box, select the command and then type
the argument in the box to the right of the command.
Note The correct format for arguments is . For example, with the
command show already listed, you might enter permit run as the argument.
Tip You can list several arguments for a single command by pressing Enter between arguments.
e. To allow arguments, which you have not listed, to be effective with this command, select the Permit
Unmatched Args check box.
f. To add other commands to this command-authorization set, repeat Step a through Step e.
Step 8 To save the command-authorization set, click Submit.
ACS displays the name and description of the new command-authorization set in the applicable
Command Authorization Sets table.
Editing a Command Authorization Set
To edit a command-authorization set:
Step 1 In the navigation bar, click Shared Profile Components.
The Shared Profile Components page lists the command-authorization set types available.
Step 2 Click a command-authorization set type, as applicable.
The selected Command Authorization Sets table appears.
Step 3 From the Name column, click the name of the set you want to change.
Information for the selected set appears on the applicable Command Authorization Set page.
Step 4 If an expandable checklist tree appears below the Name and Description boxes, you can do any or all of
the following:
To expand a checklist node, click the plus (+) symbol to its left. To collapse an expanded checklist
node, click the minus (-) symbol to its left.
OL-14386-02