Filter
Top Products
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
aaa authorization
SR-9
Cisco IOS XR System Security Command Reference
aaa authorization
To create a method list for authorization, use the aaa authorization command in global configuration
mode. To disable authorization for a function, use the no form of this command.
aaa authorization {commands | exec | network} {default | list-name} {none | local | group
{tacacs+ | radius | group-name}}
no aaa authorization {commands | exec | network} {default | list-name}
Syntax Description
Defaults Authorization is disabled for all actions (equivalent to the method none keyword).
Command Modes Global configuration
Command History
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
commands Configures authorization for all EXEC shell commands.
exec Configures authorization for an interactive (EXEC) session.
network Configures authorization for network services, such as PPP or Internet Key
Exchange (IKE).
default Uses the listed authorization methods that follow this keyword as the default list
of methods for authorization.
list-name Character string used to name the list of authorization methods.
none Uses no authorization. If you specify none, no subsequent authorization methods
is attempted. However, the task ID authorization is always required and cannot be
disabled.
local Uses local authorization. This method of authorization is not available for
command authorization.
group tacacs+ Uses the list of all configured TACACS+ servers for authorization.
group radius Uses the list of all configured RADIUS servers for authorization. This method of
authorization is not available for command authorization.
group group-name Uses a named subset of TACACS+ or RADIUS servers for authorization as
defined by the aaa group server tacacs+ or aaa group server radius command.
Release Modification
Release 2.0 This command was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 This command was supported on the Cisco XR 12000 Series Router.
Release 3.3.0 No modification.