topic tacacs: privilege levels in Network Access Control

tacacs: privilege levels

ronen8250 — Mon, 11 Mar 2019 06:40:22 GMT

I use tacacs+ server on my network.
I want to set some users to view-only (all the commands starting with "show")
Example: "show running-config"
But I want those users can also use the command "terminal legnht"
How do I do that?

With TACACS+ you can do

nspasov — Wed, 13 Apr 2016 15:18:51 GMT

With TACACS+ you can do command level authorization. Thus, you can provide users with priv-level-15 but then restrict command access to just "show run" and "terminal length"

Thank you for rating helpful posts!