aaa authorization map

Description

Use the aaa authorization map default-user command to configure authorization mapping settings. Authorization is the action of determining what a user is allowed to do. Generally, authentication precedes authorization.

Syntax

aaa authorization map default-user <user>
no aaa authorization map default-user

aaa authorization map order <policy>
no aaa authorization map order

Arguments

default-user <user>	Specifies the user ID of a valid local user. Generally, this is admin or monitor.
map default-user <user>	Sets the local user default mapping. Use the no form of this command to clear the local user default mapping.
map order <policy>	Specifies in what order to handle remote-to-local user mapping. The available policies are: • remote-only Only honor user mapping from remote authentication server. • remote-first Honor user mapping from remote auth server, if provided; otherwise use local mapping. • local-first Ignore user mapping from remote auth server; use local mapping only. Use the no form of the command to clear the authorization user mapping order policy.

 

Defaults

None.

Command Mode

Global Configuration Mode

See Also

See the following related commands:

n	“aaa authentication login default”

n	“show aaa”

Usage Guidelines

When you enter a user name, the system verifies in the database that the user ID is valid.

Examples

To set authorization mapping to check the remote database first:

(config) # aaa authorization map order remote-first

 

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.