topic Change interface descriptions in Network Access Control https://community.cisco.com/t5/network-access-control/change-interface-descriptions/m-p/321237#M433654 <P>Hi all,</P><P></P><P>On my ACS server, I have a group which can only issue 'show' commands. I would like this group to be able to change interface descriptions aswell. For CatOS this was easy: authorize the 'set' command and only 'port name' as permitted attribute.</P><P>For IOS, however, it is more complicated. The user must be able to do 'conf t', select an interface and then use the "description' command.</P><P></P><P>Yet when I add 'configure teminal' to the shell authorization set the user can use any command.</P> Sun, 10 Mar 2019 20:47:01 GMT Siebe Brouwer 2019-03-10T20:47:01Z Change interface descriptions https://community.cisco.com/t5/network-access-control/change-interface-descriptions/m-p/321237#M433654 <P>Hi all,</P><P></P><P>On my ACS server, I have a group which can only issue 'show' commands. I would like this group to be able to change interface descriptions aswell. For CatOS this was easy: authorize the 'set' command and only 'port name' as permitted attribute.</P><P>For IOS, however, it is more complicated. The user must be able to do 'conf t', select an interface and then use the "description' command.</P><P></P><P>Yet when I add 'configure teminal' to the shell authorization set the user can use any command.</P> Sun, 10 Mar 2019 20:47:01 GMT https://community.cisco.com/t5/network-access-control/change-interface-descriptions/m-p/321237#M433654 Siebe Brouwer 2019-03-10T20:47:01Z Re: Change interface descriptions https://community.cisco.com/t5/network-access-control/change-interface-descriptions/m-p/321238#M433655 <HTML><HEAD></HEAD><BODY><P>Hi all, I've found it myself:</P><P>aaa authorization config-commands </P><P></P><P>that did the trick!</P></BODY></HTML> Fri, 03 Sep 2004 07:49:37 GMT https://community.cisco.com/t5/network-access-control/change-interface-descriptions/m-p/321238#M433655 Siebe Brouwer 2004-09-03T07:49:37Z