Create a user group

Updated: July 17, 2026

Want to summarize with AI?

Use this procedure to create a user group to associate command rules and data rules that are enforced on all users in the group.

NCS 1004 supports up to 32 user groups.

Before you begin

Create a user profile

Procedure

	1.	Enter the admin command to access System Admin EXEC mode. Example: `RP/0/RP0/CPU0:ios# admin`
	2.	Enter the config command to access System Admin config mode. Example: `sysadmin-vm:0_RP0# config`
	3.	Enter the aaa authentication groups group group_name command to create a new user group and enter group configuration mode. Example: `sysadmin-vm:0_RP0#(config)# aaa authentication groups group gr1` Note The system creates the user group 'root-system' automatically when you create the root user. The root user is a member of this group. Users added to this group receive root user permissions.
	4.	Enter the users user_name command to specify the name of the user that must be part of the user group. Example: `sysadmin-vm:0_RP0#(config-group-gr1)# users us1` You can specify multiple usernames that are enclosed within double quotes. For example, `users "user1 user2 ..."`.
	5.	Enter the gid group_id_value command to specify the group ID. Example: `sysadmin-vm:0_RP0#(config-group-gr1)# gid 50` Enter any 32-bit integer.
	6.	Enter the commit or end command to save the configuration. The commit command saves the configuration changes and remains within the configuration session. The end command prompts you to take one of these actions: Yes: saves configuration changes and exits the configuration session. No: exits the configuration session without committing the configuration changes. Cancel: remains in the configuration session without committing the configuration changes.

What to do next

After creating a user group, complete these tasks:

Create command rules. See Create command rules for details.
Create data rules. See Create data rules for details.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Create a user group

Before you begin

Procedure

Example:

Example:

Example:

Example:

Example:

What to do next