Kate
I am quite familiar with using ACS to create accounting entries that log every privilege level command (including config commands) that are entered. I have used it and it works quite well. I do not have experience with trying to do this to an RSA server. Since the focus of RSA is so much on authentication I wonder if they also implement the accounting part of aaa.
HTH
Rick
HTH
Rick