32-20
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 32      Configuring Management Access
  Configuring AAA for System Administrators
Figure 32-1 Permitting All Related Commands
• For commands that are a single word, you must permit unmatched arguments, even if there are no 
arguments for the command, for example enable or help (see Figure 32-2).
Figure 32-2 Permitting Single Word Commands
•
To disallow some arguments, enter the arguments preceded by deny.
For example, to allow enable, but not enable password, enter enable in the commands field, and 
deny password in the arguments field. Be sure to check the Permit Unmatched Args check box so 
that enable alone is still allowed (see Figure 32-3).