Command authorization when using CMS

[kennet]

I want to make a setup where the people in the helpdesk are able to manage the configuration on fastethernet ports, but they are not allow to modify the gigabit ports. When using the CLI I can restrict the users, but when they are using CMS.

In short: Can I combine interface and command in the authorization ?

/Kennet

[drolemc]

I do remember configuring a setup where users were allowed to enter the configuration mode but denied access to interface configuration mode. That makes me think that what you are trying should be possible.