Cisco Systems 3.3 Manual De Usuario

To assign the PIX command authorization set at the group level, select the As 
Group option.

To assign a particular PIX command authorization set to be effective on any 
configured network device, follow these steps:

Select the Assign a PIX Command Authorization Set for any network 
device option.

From the list directly below that option, select the PIX command 
authorization set you want applied to this user.

To create associations that assign a particular PIX command authorization set to 
be effective on a particular NDG, for each association, follow these steps:

Select the Assign a PIX Command Authorization Set on a per Network 
Device Group Basis option.

Select a Device Group and an associated Command Set.

Click Add Association.

The associated NDG and PIX command authorization set appear in the table.

Do one of the following:

If you are finished configuring the user account options, click Submit to 
record the options.

To continue to specify the user account options, perform other procedures in 
this chapter, as applicable.

Use this procedure to specify the device-management command authorization set 
parameters for a user. Device-management command authorization sets support 
the authorization of tasks in Cisco device-management applications that are 
configured to use Cisco Secure ACS for authorization. You can choose one of four 
options:

None—No authorization is performed for commands issued in the applicable 
Cisco device-management application.

Group—For this user, the group-level command authorization set applies for 
the applicable device-management application.