aaa authorization console/exec default local

phoeneous

When creating different views or role based access, I assume it is necessary to apply the commands aaa authorization console and aaa authorization exec default local if I want the view to be applied to specific usernames? The reason I ask is I was watching Jeremy C's CBT Nuggets video on creating views and he never issues either of those two commands. I followed his steps in creating a helpdesk username with a view that used commands exec include all show and commands exec include all ping but when I logged in as helpdesk I was able to issue any command. Then after issuing aaa authorization console and aaa authorization exec default local and logged back in as user helpdesk, only show and ping commands were available. Just confirming what I am guessing.

EDIT:

According to here if I don't issue aaa authorization console it sounds like the view will not be applied.

Authentication, authorization, and accounting (AAA) authorization is disabled on the console.

I guess I just answered my own question...

phoeneous

Confirmed:

YouTube - Enable Views and Role-Based CLI - Part III