ACS SE 1113 setup up different groups

[peterhkim]

I'm trying to setup two different groups on ACS SE - one with full admin access and read only. I want to limit readOnly group do "show" command on routers switches, and ASA. What will be the best way to achieve this?

Thanks.

[Collin Clark]

Here's my documentation for PIX/ASA. IOS should be very similar.

Hope it helps.

[peterhkim]

Thanks for your reply. I think I'm almost there. Only problem I have now is with ASA. Somehow, I can't type "exit" or "quit" to disconnect from ASA. I tried to created PIX authorizatin profile just like what it said on your paper. It works with router or switch. Any idea? I'm running 7.2 on ASA.

Thanks.

[peterhkim]

The problem has been resolved.

Thanks.