In the following example, you create an AV pair for a user-defined role. You must also define a role, using the userrole myroleinherit command on the switch to associate it with this AV pair.Force10-avpair= ”shell:role=myrole“The string, “myrole”, is associated with a TACACS+ user group. The user IDs are associated with the user group.Role AccountingThis section describes how to configure role accounting and how to display active sessions for roles.This sections consists of the following topics:• Configuring AAA Accounting for Roles• Applying an Accounting Method to a Role• Displaying Active Accounting Sessions for RolesConfiguring AAA Accounting for RolesTo configure AAA accounting for roles, use the aaa accounting command in CONFIGURATION mode.aaa accounting {system | exec | commands {level | role role-name}} {name | default} {start-stop| wait-start | stop-only} {tacacs+}Example of Configuring AAA Accounting for RolesThe following example shows you how to configure AAA accounting to monitor commands executed by the users who have a secadminuser role.Dell(conf)#aaa accounting command role secadmin default start-stop tacacs+Applying an Accounting Method to a RoleTo apply an accounting method list to a role executed by a user with that user role, use the accounting command in LINE mode.accounting {exec | commands {level | role role-name}} method-listExample of Applying an Accounting Method to a RoleThe following example applies the accounting default method to the user role secadmin (security administrator).Dell(conf-vty-0)# accounting commands role secadmin defaultDisplaying Active Accounting Sessions for RolesTo display active accounting sessions for each user role, use the show accounting command in EXEC mode.Example of Displaying Active Accounting Sessions for RolesDell#show accountingActive accounted actions on tty2, User john Priv 1 Role netoperatorTask ID 1, EXEC Accounting record, 00:00:30 Elapsed,service=shellActive accounted actions on tty3, User admin Priv 15 Role sysadminTask ID 2, EXEC Accounting record, 00:00:26 Elapsed,service=shell790 Security
