it is Possible with ACS 5.8?

[Kevin Morales]

Hi, I need to permit to user only create, delete or modify any access-list that begin with "TEST-". and another ACL that beging with any character the user is not allowed to modify.

configure terminal

ip access-list extended TEST-ACL 

 permit ip ...

 permit ip ..

it is possible to do it with ACS 5.8?,

[balaji.bandi]

I have not fully explored specifically 1 ACL, you need think and allow add specific command set for that user.

here is document for reference :

https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113590-acs5-tacacs-config.html

[Seb Rupik]

Hi there,

The command set would look like:

Grant	Command	Argument
Permit	ip	access-list extended TEST-

cheers,

Seb.