Mario
I agree that if you add this user to an existing group that has access to many routers then how will this user be restricted. What about configuring a new group in ACS, assign this user to the new group, and configure this new group to have access only to this particular router?
HTH
Rick
HTH
Rick