Authrization with tacacs

[hanwucisco]

We have a group in TACACS ACS4.2.  I configure it can do show command. When logged, it can do show command some parameters, like show ip interface, but it cannot do show running-config. it says "command authorization failed".

Any idea?

thanks,

Han

[Javier Henderson]

Can you please either post a screenshot of the shell command authorization set, or an exact description of how you confiugured it?

[Bharat Negi]

Try these commands on netword device

aaa authorization commands 0 default group tacacs+ local

aaa authorization commands 1 default group tacacs+ local

aaa authorization commands 7 default group tacacs+ local

aaa authorization commands 15 default group tacacs+ local

Also share defined Shell Command set.

regards/bsn