TACACS+ Authentication Manager Help >> Operation Guide >> Device User Policy >> Authorization Command Configuration >> Command Set Configuration

Command Set Configuration

Use the command set configuration function to control the commands that a user can use. To validate a command set in TAM, first enable the command authorization on the device. Then TAM configures the command set for the user according to the predefined authorization policy as long as the user passes the authentication. When the user executes a command, the device determines whether to allow the user to execute the command according to the command set.

Features

• Add Command Set
  
  Perform this task to add a command set.

  Procedure

  1. Click the User tab, and select Device User Policy > Authorization Command > Command Sets from the navigation tree to open the Command Sets page.
  2. Click Add to open the page for adding a command set.
  3. Type the command set name, which must be unique in TAM.
  4. Select a Default Authorization Type. Permit means commands not in the command set can be used. Deny means commands not in the command set cannot be used.
  5. Type the description for the command set.
  6. Click Add in the Command Set Information area. The Command dialog box appears.
  7. Select an authorization type. Permit means commands not in the command set can be used. Deny means commands not in the command set cannot be used.
  8. Type the command line. Enter the command line to be matched. You can also specify a regular expression for filtering.
  9. Click OK.
  10. Repeat steps 6 through 10 to add more command configurations. If a command matches multiple command configurations, the authorization type in the command configuration with the highest priority is adopted.
  11. Click OK.
• Modify Command Set
  
  Perform this task to modify a command set.

  Procedure

  1. Click the User tab, and select Device User Policy > Authorization Command > Command Sets from the navigation tree to open the Command Sets page.
  2. Click the icon of the target command set to open the page for modifying the command set.
  3. Modify parameters as needed. For more information about the parameters, see Add Command Set.
  4. Click OK.
• Delete Command Set
  
  Perform this task to delete a command set. You cannot delete command sets in use.

  Procedure

  1. Click the User tab, and select Device User Policy > Authorization Command > Command Sets from the navigation tree to open the Command Sets page.
  2. Click the icon of the target command set.
     A confirmation dialog box appears.
  3. Click OK.
• Copy Command Set
  
  Perform this task to copy a command set to reduce the workload of operators.

  Procedure

  1. Click the User tab, and select Device User Policy > Authorization Command > Command Sets from the navigation tree to open the Command Sets page.
  2. Click the icon of the target command set to open the page for copying a command set.
  3. Configure parameters as needed. For more information about the parameters, see the Add Command Set page.
  4. Click OK.