Adding a user to the YARA rules access group using the CLI

Prev Next

Use the commands in this topic to add a user to the YARA rules access group.

To add a user to the access group:
  1. Log in to the Network Security CLI.

  2. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  3. Add a user to the access group:

    hostname (config) # aaa authorization access-groups rules rule append tail grant-access-group <access group name> match-mapped-local-username <user name>

    where:

    • access group name is the name of the access group. 

    • user name is the name of the analyst or monitor user.

  4. Verify your change:

    hostname (config) # show aaa authorization access-groups rules
  5. Save your changes:

    hostname (config) # write memory

Example

The following example adds the user "analyst_a" to the "special-analysts" access group on the Network Security appliance.

hostname (config) # aaa authorization access-groups rules rule append tail grant-access-group special_analysts match-mapped-local-username analyst_a
hostname (config) # show aaa authorization access-groups rules
-------------------------------------------------------------- 
#         AAA Authorization Access-groups Rules : Enabled 
-------------------------------------------------------------- 
# Rule          Statements      
-------------------------------------------------------------- 

# 1
Match Map Local Users              : analyst_a
Grant Access Groups                : special_analysts