cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
456
Views
0
Helpful
1
Replies

ACS 4.1- shell command works under user but not group

t.doherty
Level 1
Level 1

Hi,

This question might actually belong under tacacs server but it's only happening with the ACE.  I've configured tacacs on the 4710 and configured the tacacs server per the documentation. If I enter the shell:<context>*Admin default-domain under the group settings when I login with my tacacs ID my role is set to Network-Monitor.  If I set the shell in my specific tacacs ID I'm assigned the correct role as Admin.  We're running ACS ver 4.1 and the ACE is A4(1.1)

Thanks

1 Reply 1

Tarik Admani
VIP Alumni
VIP Alumni

For the tacacs settings under the user settings make sure you select the radio button for "Use Group Level Setting" rather than just removing the av-pair.

Thanks,

Tarik