user access on css 11000

[bob.hayes]

My goal is to create a user account that has the ability to suspend services and that's about it. The type of user I need to allow access is either the sysadmins for the web servers or the NOC to disable a machine for maintenance. I haven't found any useful information in the "user profile" section of the command reference. As of now I've setup super-user access, but that is less than ideal for my environment. Any help would be appreciated. Thanks

[Gilles Dufour]

I believe you will need TACACS+.

ieffa(config)# tacacs-server authorize ?

config Authorize configuration commands

non-config Authorize non-configuration commands

On the TACACS server, you control the authorization of every single command you want.

Gilles.

[bob.hayes]

Thanks Gilles, I was hoping there were some config command levels already setup. That's a better route anyway since it'll give me more control over what's changed in the network. Implementing TACACS+ will just have to go on my project list.