When Cisco (and many similar) devices need to check if a user is allowed into enable mode they send an aothorization request for a specific username. This username (and associated password) need to be in the password file as bellow:
$enab15$:<ENC PASSWD>:1000:499:Exec:/:/bin/false
where "15" is the authntication level being requested.