Seperate admin authority via ACS 3.0 Win2K

[zabbas]

Here is the scenario:

1) We have a group of people that manage all network equipment and need full access to each of these devices.

2) We have another group that only needs user access to 2 of these network devices for doing 'show' commands.

I have been unable to setup the ACS so that it will allow Group 2, to ONLY access the 2 devices. I've tried putting NAR's in by user and it still doesn't work. It still allows them login access to ALL the network devices.

I've also tried setting Group 2 as a seperate group, also have tried putting the 2 network devices in a another Network Group.

[ciscomoderator]

Often times complex troubleshooting/configuration issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, it’s often difficult to do so for this type of issue.

To utilize the resources at our Technical Assistance Center, please visit http://www.cisco.com/tac and to open a case with one of our TAC engineers, visit http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.