The 'read-only' access can be considered as limiting the access to view reports only.
- In ACS Main Menu, go to "Administration Control".
- Under Administrator Privileges - Report and Activity..., select the following or depend on your requirements:
TACACS+ Accounting
RADIUS Accounting
VoIP Accounting (if you have VoIP services tied to ACS)
Passed Authentication
Failed Attempt
Logged-in Users. Maybe you can exclude the "Purged of Logged-in Users)
Disabled Accounts
When this admin user logged in (must be from remotely from other pc/workstation - http://:2002/), his admin privileges will be limited to the above settings, which can only view reports.
Rgds,
AK
