If the user group of an online user needs to be changed but the dynamic authorization server is down, enable command line-based reauthorization. This function allows you to run commands to change the user group and reauthorize the user.
Generally, ACLs are used to control user access authorities, and ACL rules are configured based on user groups. Therefore, to change a user's access authority, you can change its user group. For example, ACL rules are configured to allow user group 1 to access only the internal network and user group 2 to access both internal and external networks. When user A in user group 1 goes online, user A can access the internal network only. To allow user A to access both internal and external networks, reauthorize user A by changing its user group to user group 2.
The system view is displayed.
Command line-based reauthorization is enabled.
The user group of a specified user is changed.
The configuration is committed.