You must send correct commands for authorization or else the results may not be reliable.
Note
The
test
command uses the default (non-console) method for authorization, not the console method.
Note
Before you begin
Enable .
Ensure that you have configured command authorization for the servers.
SUMMARY STEPS
1.
test aaa authorization command-type
{
commands
|
config-commands
}
user username command
command-string
DETAILED STEPS
Purpose
Command or Action
Tests a user's authorization for a command on the
servers.
test aaa authorization command-type
{
commands
|
config-commands
}
user username command
command-string
Step 1
The
commands
keyword specifies only EXEC commands
and the
config-commands
keyword specifies only
configuration commands.
Example:
switch# test aaa authorization command-type
commands
user TestUser command reload
Put double quotes (") before and after the
command-string
argument if it contains spaces.
Note
Related Topics
, on page 73
Configuring Command Authorization on Servers
, on page 90
Configuring User Accounts and RBAC
Enabling and Disabling Command Authorization Verification
You can enable and disable command authorization verificaiton on the command-line interface (CLI) for the
default user session or for another username.
The commands do no execute when you enable authorization verification.
Note
SUMMARY STEPS
1.
terminal verify-only
[
username username
]
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
93
Configuring
Enabling and Disabling Command Authorization Verification
