The Group's default privilege and max privilege is 15.
and i set a command at Tacacs Command set like this
and when i login at network device and, when i enter [configure terminal], It worked as set up.
but when i enter ip route x.x.x.x x.x.x.x x.x.x.x or interface gi x/x/x it still work
how can i deny the command ?