6-3
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 6 Setting Up and Managing User Groups
Common User Group Settings
Cisco Secure ACS also enables you to enter and configure new TACACS+
services. For information about how to configure a new TACACS+ service to
appear on the group setup page, see Protocol Configuration Options for
TACACS+, page 3-7.
If you have configured Cisco Secure ACS to interact with a Cisco
device-management application, new TACACS+ services may appear
automatically, as needed, to support the device-management application. For
more information about Cisco Secure ACS interaction with device-management
applications, see Support for Cisco Device-Management Applications, page 1-18.
You can use the Shell Command Authorization Set feature to configure TACACS+
group settings. This feature enables you to apply shell commands to a particular
user group in the following ways:
• Assign a shell command authorization set, which you have already
configured, for any network device.
• Assign a shell command authorization set, which you have already
configured, to particular NDGs.
• Permit or deny specific shell commands, which you define, on a per-group
basis.
For more information about shell command authorization sets, see Chapter 5,
“Setting Up and Managing Shared Profile Components.”
Common User Group Settings
This section presents the basic activities you perform when configuring a new
user group. This section contains the following procedures:
• Enabling VoIP Support for a User Group, page 6-4
• Setting Default Time-of-Day Access for a User Group, page 6-5
• Setting Callback Options for a User Group, page 6-6
• Setting Network Access Restrictions for a User Group, page 6-7
• Setting Max Sessions for a User Group, page 6-11
• Setting Usage Quotas for a User Group, page 6-13