Integrate TACACS+ between Cisco WLC and Cisco ISE

[Arie --]

Hi,

I want to integrate Cisco WLC and Cisco ISE 2.3 for AAA using TACACS+.

From configuration guide on link below, we can set profile to authorize user what tab he/she can access.

https://communities.cisco.com/docs/DOC-68196

But, in Cisco WLC, the Internal User has capability to choose Read-Only or Read-Write without filtering what tab can be accessed. If I integrate the Cisco WLC to Cisco ISE for TACACS+, can I divide user profile only to Read-Only and Read-Write? Instead of divide user on what tab he/she can access.

Thank you

Arie

[Karsten Iwen · Accepted solution]

You can assign your read-write users the role "ALL" and the read-only users the role "MONITOR".

[Arie --]

Great! Thank you. It's work.

[shammock]

Will a read-only user with the role "MONITOR" also apply to the CLI or only WebUI please?