ACS v3.1 usign TACACS+ to limit user access

[Rodney-roberts]

I am using CiscoSecure ACS v3.1 and I have 200 switches and routers point to 2 ACS servers using TACACS+ to authenticate and grant management access to 3 network admins I want to limit access for some users to do all show commands and some interface level commands i.e. no shut... but not allow some commands i.e. shutdown and interface, or to do a reload... I have been told this is possible but I haven’t been able to do this yet.. Also all users use the same enable secret password witch is local to the switches/routers.

Thanks

[nihal.akbulut]

You can configure seperate enable passwords and privilege level per user,so the place is "Advanced tacacs+ settings" window in the "User Setup" screen..