User Guide

302 Authentication, Authorization, and Accounting
Authorization
Authorization is used to determine which services the user is allowed to
access. For example, the authorization process may assign a user’s privilege
level, which determines the set of commands the user can execute. There are
three kinds of authorization: commands, exec, and network.
• Commands: Command authorization determines which CLI commands
the user is authorized to execute.
• Exec: Exec authorization determines what the user is authorized to do on
the switch; that is, the user’s privilege level and an administrative profile.
• Network: Network authorization enables a RADIUS server to assign a
particular 802.1X supplicant to a VLAN. For more information about
802.1X, see "Port and System Security" on page 663.
Table 9-8 shows the valid methods for each type of authorization:
Exec Authorization Capabilities
Dell EMC Networking N-Series switches support two types of service
configuration with exec authorization: privilege level and administrative
profiles.
Privilege Level
By setting the privilege level during exec authorization, a user can be placed
directly into Privileged Exec mode when they log into the command line
interface.
Table 9-8. Authorization Methods
Method Commands Exec Network
local no yes no
none yes yes no
radius no yes yes
tacacs yes yes no