Locally overriding remote user mappings using the CLI

Use the CLI commands in this topic to override remote user mappings.

Prerequisites

To configure local override rules:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Displays all authorization rules, including whether they are enabled:
```
hostname (config) # show aaa authorization rules
```

Enable all authorization rules:

hostname (config) # aaa authorization rules enable

Disable all authorization rules:

hostname (config) # no aaa authorization rules enable

To delete the specified rule, use the following command:
```
no aaa authorization rules rule <ruleNumber>
```
To create a new rule or to modify an existing rule, use the following command:
```
aaa authorization rules rule <wordPair>
```
where <wordPair> is one of the following:
- append tail creates a new rule after the highest-numbered existing rule or at position 1 if there are no rules.
- insert <ruleNumber> creates a new rule at the specified number. If another rule is already at that position, it is shifted up by one, along with the other existing rules above it.
- set <ruleNumber> creates a new rule at the specified number. If another rule is at that position, it is replaced.
- modify <ruleNumber> creates or modifies the rule at the specified number. If another rule is at that position, its values are preserved, except when they are overwritten by new values specified in this command.
Save your changes:
```
hostname (config) # write memory
```

For command usage and parameters, see the CLI Reference.