User Guide for Cisco Secure Access Control Server - Stewing Home

Basic User Setup Options
6-14
User Guide for Cisco Secure Access Control Server 4.2
Chapter 6 User Management
Failed attempts exceed—Check the Failed attempts exceed check box and then type the
number of consecutive unsuccessful login attempts to allow before disabling the account. The
default is 5.
Step 3 To continue to specify other user account options, perform the required steps. See the other procedures
in this section, as applicable.
Step 4 If you are finished configuring the user account options, click Submit to record the options.
Assigning a Time Bound Alternate Group
This feature can be used to designate another user as an alternate administrator. The alternate
administrator has administrative privileges within the boundaries set by a start date, end date, and time
limits.
To configure an alternate administrator:
Step 1 Check thE Enable Time Bound Alternate Group check box.
Step 2 Select the month and enter the date and year. for the Start Date
Step 3 Enter the Time (hh:mm) at which the alternate administrator gains privilege.
Step 4 Select the month and enter the date and year for the End Date.
Step 5 Enter the time (hh:mm) at which the alternate administrator relinquishes administrative privileges.
Step 6 Select the Alternate Group to which administrative privilege will be granted. from the drop down list.
Step 7 To continue to specify other user account options, perform the required steps. See the other procedures
in this section, as applicable.
Step 8 If you are finished configuring the user account options, click Submit to record the options.
Assigning a Downloadable IP ACL to a User
You can use the Downloadable ACLs feature to assign an IP Access Control List (ACL) at the user level.
You must configure one or more IP ACLs before you assign one. For instructions on how to configure a
downloadable IP ACL by using the Shared Profile Components section of the ACS web interface, see
Adding a Downloadable IP ACL, page 4-15.
Note The Downloadable ACLs table does not appear if it has not been enabled. To enable the Downloadable
ACLs table, click Interface Configuration > Advanced Options, and then check the User-Level
Downloadable ACLs check box.
To assign a downloadable IP ACL to a user account:
Step 1 Perform Step 1 through Step 3 of Adding a Basic User Account, page 6-3.
The User Setup Edit page opens. The username being added and edited is at the top of the page.
Step 2 Under the Downloadable ACLs section, click the Assign IP ACL: check box.
OL-14386-02