User Guide for Cisco Secure Access Control Server - Stewing Home

Action Codes
174 ADD_IOS_COMMAND UN|GN,
VN, V1
E-16
User Guide for Cisco Secure Access Control Server 4.2
Appendix E RDBMS Synchronization Import Definitions
Table E-5 Action Codes for Modifying TACACS+ and RADIUS Group and User Settings (continued)
Action
Code Name Required Description
175 REMOVE_IOS_COMMAND UN|GN,
VN
Authorizes the given Cisco IOS command and determines if
any arguments given to the command are to be found in a
defined set or are not to be found in a defined set. The
defined set is created using Actions 176 and 177:
GN = "Group 1"
VN = "telnet"
V1 = "permit"
or
UN = "fred"
VN = "configure"
V1 = "deny"
The first example permits the Telnet command to be
authorized for users of Group 1. Any arguments can be
supplied to the Telnet command as long as they are not
matched against any arguments defined via Action 176.
The second example permits the configure command to be
authorized for user fred, but only if the arguments supplied
are permitted by the filter defined by a series of Action 176.
Removes command authorization for the user or group:
GN = "Group 1"
VN = "telnet"
or
UN = "fred"
VN = "configure"
Users of Group 1 can no longer use the Cisco IOS telnet
command.
User fred can no longer use the configure command.
OL-14386-02