Authorization Commands

This chapter describes the function and displays the syntax for authentication, authorization, and accounting (AAA) authorization commands. For more information about defaults and usage guidelines, see the corresponding chapter of the Security Command Reference.

aaa authorization

Use the aaa authorization global configuration command to set parameters that restrict a user's network access. Use the no form of this command to disable authorization for a function.

aaa authorization {network | exec | command level} method
no aaa authorization {network | exec | command level}

network	Runs authorization for all network-related service requests, including SLIP, PPP, PPP NCPs, and ARA protocol.
exec	Runs authorization to determine if the user is allowed to run an EXEC shell. This facility might return user profile information such as autocommand information.
command	Runs authorization for all commands at the specified privilege level.
level	Specific command level that should be authorized. Valid entries are 0 through 15.
method	AAA authorization method.

aaa authorization config-commands

To disable AAA configuration command authorization in the EXEC mode, use the no form of the aaa authorization config-commands global configuration command. Use the standard form of this command to reestablish the default created when the aaa authorization command level method command was issued.

aaa authorization config-commands
no aaa authorization config-commands

aaa new-model

To enable the AAA access control model, use the aaa new-model global configuration command. Use the no form of this command to disable this functionality.

aaa new-model
no aaa new-model