HP Intelligent Management Center v5.1 TACACS+ Authentication Manager Administrator Guide
44
the authorized time range where the user is in according to the command execution time of the user and
determines whether the user can execute the command according to the command set corresponding to
the authorized time range. Assume that you configure two authorized time ranges A (08:00 to 10:00)
and B (10:30 to 11:00). When a user executes a command at 09:00, the command set corresponding
to authorized time range A applies. The command set corresponding to authorized time range B applies
no matter whether the user stays online or logs in again after logs out when a user executes a command
at 10:40. For more information about authorized time range configuration, see "Configuring authorized
time range policies."
Viewing the command set list
To view the command set list:
1. Click the Service tab.
2. Select TACACS+ AuthN Manager > Authorization Command > Command Sets from the navigation
tree.
The Command Set List displays all command sets.
Command set list contents
• Command Set Name—Name of the command set. Click the name to view its details.
• Description—Description of the command.
• Modify—Click the Modify icon to modify the command set.
• Delete—Click the Delete icon to delete the command set.
• Copy—Click the Copy icon to copy the command set.
3. To view the latest command set list, click Refresh.
Viewing command set details
To view command set details:
1. Click the Service tab.
2. Select TACACS+ AuthN Manager > Authorization Command > Command Sets from the navigation
tree.
The Command Set List displays all command sets.
3. Click the name link of a command set to enter the command set details page.
Basic Information
Command Set Name—Name of the command set.
Default Authorization Type—The values can be Permit or Deny. Permit means a device user can
use commands not in the command set. Deny means a user cannot use commands not in the
command set.
Description—Description of the command set.
Command Set Information
Each line in a command set list defines a rule, which permits or denies a user to execute one or
more commands.
Authorization—Authorization type, which can be Permit or Deny. Permit means a user can
execute the command displayed on this line. Deny means a user cannot execute the command
displayed on this line.