Troubleshooting guide

1-17
Cisco Wide Area Application Services Configuration Guide
OL-26579-01
Chapter 1 Creating and Managing Administrator User Accounts and Groups
Creating and Managing User Accounts
Viewing Domains
To view the domain configuration for a particular user account or group, follow these steps:
Step 1 From the WAAS Central Manager menu, choose Admin > AAA > Users (or Admin > AAA > User
Groups).
The User Accounts (or User Groups) window appears with all configured user accounts or groups listed.
Step 2 Click the Edit icon next to the user account or group for which you want to view the domain
configuration.
The Modifying User Account (or Modifying User Group) window appears.
Step 3 Click the Domain Management tab.
The Domain Management window appears.
Step 4 Click the View (eyeglass) icon next to the domain name to view details about the domain.
The Viewing Domain window appears and displays the domain name, entity type, comments about this
domain, and entities assigned to this domain.
Step 5 After you have finished viewing the settings, click Close.
Working with User Groups
If you are using external authentication of users on TACACS+ or Windows domain servers (not RADIUS
servers), you may want to create user groups. By creating user group names that match the user groups
that you have defined on the external authentication server, WAAS can dynamically assign roles and
WAAS domains to users based on their membership in a group as defined on the external authentication
server. You do not need to define a role or WAAS domain for each user individually; instead, you define
roles and WAAS domains for the user groups, and the user is assigned the roles and WAAS domains that
are defined for the groups to which they belong.
Note The dynamic assignment of roles and WAAS domains based on external user groups requires a
TACACS+ server that supports shell custom attributes. For example, these are supported in Cisco ACS
4.x and 5.1 and later.
WAAS reads group membership information for each user from the external authentication server.
This section contains the following topics:
• Creating a New User Group, page 1-18
• Assigning Roles to a User Group, page 1-18
• Assigning Domains to a User Group, page 1-19
• Modifying and Deleting a User Group, page 1-20
• Viewing User Groups, page 1-20