Viewing authorization rules using the CLI

Prev Next

Use the commands in this section to view authorization rules.

To view authorization rules:
  1. Log in to the Central Management System CLI.

  2. Go to CLI enable mode:

    cm-hostname > enable
  3. View authorization rules:

    cm-hostname # show aaa authorization access-groups rules

Example

The following example shows the authorization rules configured on the cm-02 appliance.

cm-02 # show aaa authorization access-groups rules
---------------------------------------------------------
#       AAA Authorization Access-groups Rules : Enabled
---------------------------------------------------------
# Rule         Statements
---------------------------------------------------------
 # 1            Match LDAP Group         : infosec
                Grant Access Groups      : nx-alerts

 # 2            Match LDAP Group         : infosec-hq
                Grant Access Groups      : ex-alerts

 # 3            Match Local Users        : Joe Matt Sue
                Grant Access Groups      : nx-alerts ex-alerts