Cisco Cisco Prime Infrastructure 3.0 Technical Manual

Page of 5
Step 3. Select TACACS+.
Step 4. Check the Enable Fallback to Local box, if you want the administrator to use the local
database when the ACS server is not reachable. This is a recommended setting.
Retrieve user role attributes from PI
Step 1. Navigate to Administration > AAA > User Groups. This example shows administrator
authentication. Look for the Admin Group Name in the list and click the Task List option on the
right, as shown in the image:
Once you click Task List option, the window appears, as shown in the image:
Step 2. Copy these attributes and save it on a notepad file.
Step 3. You may need to add custom virtual domain attributes in the ACS server. Custom virtual
domain attributes are available in the bottom of same Task list page.   
Step 4. Click on click here option to get Virtual domain attribute page, and you can see the page,
as shown in the image: