Read-Only Role on Nexus 7K

[kdespiegeleir]

Goodday, 

I created a Shell Profile on our CISCO ACS 5.8.1.4 to allow a user (to be read-only) to do a "show run" command on a Nexus 7000. 

When I logon to the Nexus I still get "Permission denied for the role"

What do I do wrong?
I also tried shell:roles*"vdc-operator network-operator"

But this had the same effect.

Thank you!
Koen