https://community.cisco.com/t5/network-access-control/read-only-role-on-nexus-7k/m-p/3186690#M553724 <P>Goodday,&nbsp;</P><P>&nbsp;</P><P>I created a Shell Profile on our CISCO ACS 5.8.1.4 to allow a user (to be read-only) to do a "show run" command on a Nexus 7000.&nbsp;</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="acs2.png" style="width: 955px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/999i71F8F90BF153260C/image-size/large?v=v2&amp;px=999" role="button" title="acs2.png" alt="acs2.png" /></span></P><P>When I logon to the Nexus I still get "Permission denied for the role"</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="acs3.png" style="width: 733px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/1001iA60E2BBF72AD985C/image-size/large?v=v2&amp;px=999" role="button" title="acs3.png" alt="acs3.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="acs4.png" style="width: 684px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/1000i5B5C15DAFB9F869E/image-size/large?v=v2&amp;px=999" role="button" title="acs4.png" alt="acs4.png" /></span></P><P>What do I do wrong?<BR />I also tried&nbsp;<STRONG>shell:roles*"vdc-operator network-operator"</STRONG></P><P>But this had the same effect.<BR /><BR />Thank you!<BR />Koen</P> Fri, 21 Feb 2020 18:34:29 GMT kdespiegeleir 2020-02-21T18:34:29Z https://community.cisco.com/t5/network-access-control/read-only-role-on-nexus-7k/m-p/3186690#M553724 <P>Goodday,&nbsp;</P><P>&nbsp;</P><P>I created a Shell Profile on our CISCO ACS 5.8.1.4 to allow a user (to be read-only) to do a "show run" command on a Nexus 7000.&nbsp;</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="acs2.png" style="width: 955px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/999i71F8F90BF153260C/image-size/large?v=v2&amp;px=999" role="button" title="acs2.png" alt="acs2.png" /></span></P><P>When I logon to the Nexus I still get "Permission denied for the role"</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="acs3.png" style="width: 733px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/1001iA60E2BBF72AD985C/image-size/large?v=v2&amp;px=999" role="button" title="acs3.png" alt="acs3.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="acs4.png" style="width: 684px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/1000i5B5C15DAFB9F869E/image-size/large?v=v2&amp;px=999" role="button" title="acs4.png" alt="acs4.png" /></span></P><P>What do I do wrong?<BR />I also tried&nbsp;<STRONG>shell:roles*"vdc-operator network-operator"</STRONG></P><P>But this had the same effect.<BR /><BR />Thank you!<BR />Koen</P> Fri, 21 Feb 2020 18:34:29 GMT https://community.cisco.com/t5/network-access-control/read-only-role-on-nexus-7k/m-p/3186690#M553724 kdespiegeleir 2020-02-21T18:34:29Z