Seems to me that regardless of the command set that once you allow a user into Config mode all bets are off. I want to allows certain users only certain actions (like assinging ports to a different vlan) but once in Config mode none of them matter, and the user has free reign.
1. Is it even possible to restrict which commands a users has under Config mode?
2. If so, is there a specific way withing ACS 5.3 or on the router/switch itself that this needs to be defined?
Thanks for any help