Specifications

8-8
Cisco Unity Express Voice-Mail and Auto-Attendant CLI Administrator Guide for 3.0 and Later Versions
OL-14010-09
Chapter 8 Configuring Authentication, Authorization, and Accounting
Configuring Privileges
Examples
The following is sample output from the show aaa policy command:
se-10-0-0-0# show aaa policy
authentication-order local
merge-attributes enable
preferred-server remote
Configuring Privileges
Cisco Unity Express software provides several predefined privileges that you can assign to groups.
Starting with 7.0, you can also create your own privileges and modify the predefined privileges.
When you assign a privilege to a group, any member of the group is granted the privilege rights. An
administrator group is created automatically by the software initialization process from the imported
subscribers designated as administrators.
When you create or modify privileges, you add or delete the operations allowed by that privilege.
Operations define the CLI commands and GUI functions that are allowed. In addition to adding
operations to a privilege, you can also configure a privilege to have another privilege nested inside of it.
A privilege configured with a nested privilege includes all operations configured for the nested privilege.
As part of the planning process, you should decide:
• How many categories of user privileges you want to create for your company.
• Which functions each privilege will allow your users to perform.
After you decide which privileges you want your users to have:
1. Review the predefined privileges to determine whether any of them are similar to the permissions
that you want to give to each of your categories of users.
2. Configure a separate privilege for each category by specifying which operations each category of
users will be allowed to preform, optionally including predefined privileges (see
“Creating and
Customizing Privileges” on page 15).
3. Create a group for each category of user privilege and assign the appropriate privilege to each group
of users (see
“Adding and Modifying a Group” on page 7).
4. Add your users to the appropriate group.
Tip For an example of the commands used for these steps, see the “Configuration Example” section on
page 13.
Step 5
end
Example:
se-10-0-0-0(config)# end
Exits to privileged EXEC mode.
Step 6
show aaa accounting policy
Example:
se-10-0-0-0# show aaa policy
(Optional) Displays the AAA policy settings.
Command or Action Purpose