CLI Reference Guide-R04

Chapter 8 | User Authentication Commands
AAA
– 251 –
Example
Console(config)#aaa authorization exec default group tacacs+
Console(config)#
aaa authorization
commands
This command enables the authorization for Exec access. Use the no form to
disable the command level authorization service.
Syntax
aaa authorization commands level {default | method-name}
{group [tacacs+ | server-group]}
no aaa authorization commands level {default | method-name}
level - The command access privileges. (Range: 0-15)
default - Specifies the default authorization method for Exec access.
method-name - Specifies an authorization method for Exec access.
(Range: 1-64 characters)
group - Specifies the server group to use.
tacacs+ - Specifies all TACACS+ hosts configured with the tacacs-server
host command.
server-group - Specifies the name of a server group configured with the
aaa group server command. (Range: 1-256 characters)
Default Setting
Authorization of command levels is not applied.
Command Mode
Global Configuration
Command Usage
◆ This command performs authorization to determine the command level for the
user.
◆ AAA authentication must be enabled before authorization is enabled.
◆ If this command is issued without a specified named method, the default
method list is applied to all interfaces or lines (where this authorization type
applies), except those that have a named method explicitly defined.
Example
Console(config)#aaa authorization command 15 default group tacacs+
Console(config)#