topic ACS server - read only access in Network Access Control

ACS server - read only access

gavin han — Mon, 11 Mar 2019 00:41:38 GMT

HI,

how to provide read only access to user group (two users in the group). they are provided admin access as of now so will have to remove it and provide read only access.

Re: ACS server - read only access

Federico Ziliotto — Wed, 05 Jan 2011 22:03:29 GMT

Hi Gavin,

To help you faster we may need to get some further details:

1. Which ACS version are you using?

2. To what do you need your users to have read-only access?
To ACS itself? To a switch/device via TACACS+? To a switch/device via RADIUS?

Regards,

Fede

--
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Re: ACS server - read only access

gavin han — Wed, 05 Jan 2011 23:31:53 GMT

hi federico,

using acs 4.2. and i need to provide them read only access to device using tacacs+.

pls advise.

Thanks.

Re: ACS server - read only access

Federico Ziliotto — Thu, 06 Jan 2011 00:04:46 GMT

Thank you for all the details Gavin.

What you'd like to obtain could be achieved by configuring command authorization sets with ACS:
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

In particular, on this very same link you can also find an example for read-only access:
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#scenario2

Regards,

Fede

--
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.