Cisco IOS in a Nutshell, 2nd Edition

Name

aaa authorization config-commands — global

Synopsis

aaa authorization config-commands
no aaa authorization config-commands

Configures

Authorization for config level access

Default

Disabled, unless the aaa authorization command has been given, in which case all config-commands require authorization

Description

This command enables authorization of config-commands (i.e., any command that requires you to give the conf terminal command to enter configuration mode). Here’s a scenario in which you might use it: if you give the aaa authorization command, AAA authorization will be required for all commands. To disable authorization of config-commands, you can give the command no aaa authorization config-commands.

Example

aaa new-model
aaa authorization command 8 tacacs+ none
no aaa authorization config-commands