Can anyone help me with understanding one thing about AAA authorization on Cisco IOS. Here is a config fragment:
aaa authorization config-commands aaa authorization exec default group tacacs+ local aaa authorization commands 1 default group tacacs+ aaa authorization commands 15 default group tacacs+ local
Do I understand correctly that authorization allows some commands (like "commands 15") for some users (like "group tacacs+")? So why there is no option "group" for the config-commands?