aaa authorization
To create a method list for authorization, use the
aaa authorization
command in global configuration mode.
aaa authorization {exec | nacm} { default | list-name } {none | local | group | group radius |
group group-name }
Syntax Description
Configures authorization for an interactive (EXEC) session.
exec
Enables the NACM (NETCONF Access Control Model) functionality.
nacm
Uses the listed authorization methods that follow this keyword as the default list of
methods for authorization.
default
Character string used to name the list of authorization methods.
list-name
Uses no authorization. If you specify
none
, no subsequent authorization method is
attempted.
none
Uses local authorization. This method of authorization is not available for command
authorization.
local
Uses the list of all configured servers for authorization.
group
Uses the list of all configured RADIUS servers for authorization. This method of
authorization is not available for command authorization.
group radius
Specifies a named subset of or RADIUS servers for authorization.
group group-name
Command Default
Authorization is disabled for all actions (equivalent to the method none keyword).
Command Modes
Global configuration
Command History
Modification
Release
This command was introduced.
R7.0.1
Example
The following example shows how to define the network authorization method list named listname1,
which specifies that authorization is used.
configure
aaa authorization exec listname1 group
exit
commit
Command Reference for Cisco NCS 1004
5
Commands
aaa authorization
