10-07-2003 12:39 PM
My goal is to create a user account that has the ability to suspend services and that's about it. The type of user I need to allow access is either the sysadmins for the web servers or the NOC to disable a machine for maintenance. I haven't found any useful information in the "user profile" section of the command reference. As of now I've setup super-user access, but that is less than ideal for my environment. Any help would be appreciated. Thanks
10-08-2003 07:23 AM
I believe you will need TACACS+.
ieffa(config)# tacacs-server authorize ?
config Authorize configuration commands
non-config Authorize non-configuration commands
On the TACACS server, you control the authorization of every single command you want.
Gilles.
10-08-2003 07:42 AM
Thanks Gilles, I was hoping there were some config command levels already setup. That's a better route anyway since it'll give me more control over what's changed in the network. Implementing TACACS+ will just have to go on my project list.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide