Command Authorization in ACS 5.0

[thomasandy32]

Hi,

Can anybody route me to configuration example for command authorization in routers or switches or firewall for ACS 5.0.

OR

USER-A should be placed in privilege level 2 and given access to all debug commands and the undebug all command.

Assigned specified commands to level 2

privilege exec level 2 undebug all
privilege exec all level 2 debug

• The commands what i applied on routers are above.How i can set a privilege level of 2 on user in ACS 5.0.??????

• Also if i want to do shell command authorization set,how can i do it in ACS 5.0
  

     Thanks,

[Javier Henderson]

You need to create a shell profile to assign the desired privilege level, and a command set to authorize specific commands, then associate those two with the authorization policy that applies to those users.