01-05-2011 01:53 PM - edited 03-10-2019 05:41 PM
HI,
how to provide read only access to user group (two users in the group). they are provided admin access as of now so will have to remove it and provide read only access.
01-05-2011 02:03 PM
Hi Gavin,
To help you faster we may need to get some further details:
1. Which ACS version are you using?
2. To what do you need your users to have read-only access?
To ACS itself? To a switch/device via TACACS+? To a switch/device via RADIUS?
Regards,
Fede
--
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.
01-05-2011 03:31 PM
hi federico,
using acs 4.2. and i need to provide them read only access to device using tacacs+.
pls advise.
Thanks.
01-05-2011 04:04 PM
Thank you for all the details Gavin.
What you'd like to obtain could be achieved by configuring command authorization sets with ACS:
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml
In particular, on this very same link you can also find an example for read-only access:
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#scenario2
Regards,
Fede
--
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide