AAA Authorization determines what an authenticated user is allowed to do once connected to a device. This configuration guide will focus on how to do a simple AAA Authorization setup for the console and vty lines of a Cisco IOS or IOS-XE device that handle remote administrative connections. This AAA Authorization will dictate not just who can login to a device, but also what they are allowed to do once connected.

AAA Cisco Pt. 03 Local Authorization.pdf