AAA 2(3)2 Restricting access to particular domain

[ken.vance]

Using ACS 2.3.2 on Unix

Can you restrict an administrator to viewing/changing accounts on particular domains only?

Any help gratefully received!

[wdrootz]

One round about way that I know of is to make the given administrator part of a group and then to assign the user a 'web privilege' level of '12'. Doing that assigns the specified user, the 'group administrator' privileges.

(http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/cs_unx/csuindex/csu23ug/k2adv.htm#22046)

'Release Notes for CiscoSecure ACS 2.3(2) for UNIX' is another place to look around in.

(http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/cs_unx/csuindex/csu232rn/rncs232.htm)