What is one function of AAA in Aruba OS-CX devices?

AAA stands for Authentication, Authorization, and Accounting, which are key security and management elements in network devices like Aruba's OS-CX. One of the primary functions of AAA is to manage user permissions through authorization.

When a user successfully authenticates and gains access to the device, the authorization aspect determines what actions that user is allowed to perform. For example, some users may have permission to configure certain settings, while others might only have read-only access to monitor configurations. This role-based approach helps maintain security by ensuring that users can only perform actions that are appropriate to their roles within the organization.

This contrasts with other options. While controlling physical access and authentication are fundamental components of AAA, they do not encompass the complete scope of authorization. Moreover, the storage of firewall rules is related to security policies but is not a function of the AAA framework. Therefore, the correct focus on authorization as a post-login control mechanism reflects the essence of managing user permissions effectively in Aruba OS-CX devices.