After creating an LDAP group on NetScaler that matches the LDAP group name, what is the next required configuration step to authorize group members?

• A. Add users to the group on the NetScaler
• B. Create a command policy for the group to specify its permission level
• C. Bind an AAA action to the group
• D. Add a nested group to the new group

Answer: (B)

After mapping an LDAP group to a NetScaler group, you must define what that group is allowed to do on the device. Permissions in NetScaler are enforced through an authorization mechanism, and the command policy is the specific tool that sets exactly which commands or actions the group can perform. By creating a command policy for the group, you establish its permission level and scope. Once this policy exists, you would apply it through the appropriate AAA action to enforce the permissions for that group.

Manual addition of users on the NetScaler isn’t needed because membership comes from LDAP, and while binding an AAA action to the group and using nested groups can come later, the immediate next step to authorize the group is to create the command policy that defines its allowed operations.