I do not have a specific requirement just yet, but this will likely change in a few weeks.
Simply put the detailed requirement is to copy a user group. It either can (or cannot) be done.
More specifically, let's say I've a user group, I've done some configuration to get that group just the way I want it. The users in the group can issue the debug command. I want to create a new group that has the exact configuration EXCEPT the ability to issue the debug command. I would expect I could copy the first group to a new group and then edit the new group so the the debug command is restricted. Is thsi not possible?
Unfortunately no, we do not have an option to copy settings from on group to another. From the details, it seems like you are doing the command authorization. In that case, you only need to create a new Shell command authorization set, and associate it to the new group.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...