ACS server - read only access

[gavin han]

HI,

how to provide read only access to user group (two users in the group). they are provided admin access as of now so will have to remove it and provide read only access.

[Federico Ziliotto]

Hi Gavin,

To help you faster we may need to get some further details:

1. Which ACS version are you using?

2. To what do you need your users to have read-only access?
To ACS itself? To a switch/device via TACACS+? To a switch/device via RADIUS?

Regards,

Fede

--
If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

[gavin han]

hi federico,

using acs 4.2. and i need to provide them read only access to device using tacacs+.

pls advise.

Thanks.

[Federico Ziliotto]

Thank you for all the details Gavin.

What you'd like to obtain could be achieved by configuring command authorization sets with ACS:
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

In particular, on this very same link you can also find an example for read-only access:
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#scenario2

Regards,

Fede

--
If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.