CLI Guide

aaa authorization config-commands
Set parameters that restrict (or permit) a user’s access to EXEC level commands.
Syntax
aaa authorization config-commands
Disable authorization checking for CONFIGURATION level commands using the no
aaa authorization config-commands command.
Defaults Enabled when you configure aaa authorization commands command.
Command Modes CONFIGURATION
Supported Modes All Modes.
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information By default, the aaa authorization commands command configures the system
to check both EXEC level and CONFIGURATION level commands. To enable only
EXEC-level command checking, use the command no aaa authorization
config-commands
. role method is supported only on Full-Switch mode.
aaa authorization exec
Set parameters that restrict (or permit) a user’s access to EXEC-level commands.
Syntax
aaa authorization exec {name | default} {local || tacacs+ ||
if-authenticated || none}
To disable authorization checking for EXEC level commands, use the no aaa
authorization exec command.
Parameters
name Define a name for the list of authorization methods.
default Define the default list of authorization methods.
local Use the authorization parameters on the system to perform
authorization.
tacacs+ Use the TACACS+ protocol to perform authorization.
none Enter the keyword none to apply no authorization.
Defaults none
Command Modes CONFIGURATION
Supported Modes Full–Switch
1320
Security