ACS 5.1 AD Groups -> Command Sets

[varnavasn]

Hi Guys,

Just wondering how you would configure the following?

Active Directory Groups mapped to command sets per user.

ie: User A is in AD Group called 'cisco-non-restricted' User B is in AD Group called 'cisco-restricted' they have command set restrictions based on what ad group there are members of

I have command sets working with internal users and groups but cant see where you can enable this from ad groups.

Regards,

[Federico Ziliotto]

Hello,

Under the authorization rules page, on the bottom right, you should have a "Customize" button.

This will pop-up a window to select additional conditions/results to be added to your rule. There you should be able to select AD1:ExternalGroups or AD1:memberOf (see attachment) to enforce command sets according to the AD a group a user is belonging to.

Let me know if this is what you were looking for,

Fede

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.