topic ACS Server Rights in Network Access Control https://community.cisco.com/t5/network-access-control/acs-server-rights/m-p/601964#M426953 <P>hi,</P><P></P><P>i am setting up a Cisco ACS server with different privilage levels. I want to limit the set of commands under configuration mode for each different privilage level. As of now if i give conf t access, user can access all the config levekl commands, which i need to limit based on role basis. Could some one guide me how can i achieve this??</P><P></P><P></P> Sun, 10 Mar 2019 21:38:36 GMT tripat-singh 2019-03-10T21:38:36Z ACS Server Rights https://community.cisco.com/t5/network-access-control/acs-server-rights/m-p/601964#M426953 <P>hi,</P><P></P><P>i am setting up a Cisco ACS server with different privilage levels. I want to limit the set of commands under configuration mode for each different privilage level. As of now if i give conf t access, user can access all the config levekl commands, which i need to limit based on role basis. Could some one guide me how can i achieve this??</P><P></P><P></P> Sun, 10 Mar 2019 21:38:36 GMT https://community.cisco.com/t5/network-access-control/acs-server-rights/m-p/601964#M426953 tripat-singh 2019-03-10T21:38:36Z Re: ACS Server Rights https://community.cisco.com/t5/network-access-control/acs-server-rights/m-p/601965#M426959 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>For role based device admin control, you need to look at device command sets:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a0080205a4a.html#wp737624" target="_blank">http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a0080205a4a.html#wp737624</A></P><P></P><P>Tasks involve</P><P></P><P>1) Defining Network Device Groups</P><P>2) Defining set of command sets</P><P>3) For each group map NDGs to command sets</P><P></P><P>Think of a command set as a set of permissions given to a particular role (group) for a specific resource (NDG)</P><P></P><P>Darran</P></BODY></HTML> Thu, 29 Jun 2006 13:51:03 GMT https://community.cisco.com/t5/network-access-control/acs-server-rights/m-p/601965#M426959 darpotter 2006-06-29T13:51:03Z