When Cisco (and many similar) devices need to check if a user is allowed into enable mode they send an authorization request for a specific username.
This username (and associated password) need to be in the password file as bellow:
$enab15$:<ENC PASSWD>:1000:499:Exec:/:/bin/false
where "15" is the authentication level being requested.