How to disable some users attempt config terminal?

[msara]

Hi guys,

I am able to set some user privildge level below 15 and when they type conf t, it tells them the command does not exist(^ input...bla bla)

but what i expect is not such answer, instead when they type conf t, it should show "no authorization"

how do i configure cisco acs for that?

[dnewell24]

You have to create a group in ACS and permit or deny the commands. Then add the users to that group. There is also some aaa authorization commands to add to your network device.

Here is a link ACS configuration

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs31/acsuser/g.htm#1500

Here is al ink for network device configuration

http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_configuration_guide_chapter09186a00800d9810.html