Defining access group rules for YARA settings using the CLI

Use the commands in this topic to authorize an access group to modify YARA rules.

To define the access group rule:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Define the rule:

hostname (config) # aaa authorization access-groups group <access group name> rules rule append tail match-yara-rules-access]

where:

access group name is the name of the access group.

Verify your changes:

hostname (config) # show aaa authorization access-groups group <access group name>

Save your changes:
```
hostname (config) # write memory
```

Example

The following example enables the access group "special-analysts" to modify and delete YARA rules.

hostname (config) # aaa authorization access-groups group special-analysts  rules rule append tail match-yara-rules-access

hostname (config) # show aaa authorization access-groups group special-analysts
			
AAA Authorization Access-groups Rules : Enabled 

------------------------------------------------ 
# Group: special-analysts                   
------------------------------------------------ 
# Rule         Statements      
------------------------------------------------ 
#1 
		Match YARA rules access