Command Authen - All CLI and selected Enable

[ed.tarento]

CiscoSecure ACS 3.2 - I want to give selected users:

- unlimited access to all CLI command set

- enable access but only to selected commands

I'd prefer not to have to visit each router but do want the same control if the TACACS system is unavailable

[smalkeric]

The authorization command causes a request packet containing a series of AV pairs to be sent to the RADIUS or TACACS daemon as part of the authorization process. The daemon can do one of the following:

Accept the request as is.

Make changes to the request.

Refuse the request and refuse authorization. I am not sure nd it also doesn't talk about creating a request.