Tacacs command set cisco ise

[Ramzan]

Dear genius.

i am trying to restrict shutdown command under fastethernet interfaces of switch but want to allow shutdown command under gig interfaces. How will i achieve this?

is this possible or not?

please tell me Grant, Command and arguments for my query.

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113590-acs5-tacacs-config.html

I am new in AAA but I read before that TACACS can do control the commend available for each user.
please see link.
hope this help you

[Ramzan]

Dear MHM, 

i am not asking how to control AD user access using ISE. The link which you shared i know thag thing. My question was how to provide a user deny and permit access for doing shutdown at same time under different interfaces of switch.

please read my question again.

[balaji.bandi]

This is required more of testing tweaking of shell profile : @MHM Cisco World concept suggested was on ACS. but ISE  side also work as same.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200208-Configure-ISE-2-0-IOS-TACACS-Authentic.html

Watch this video get more idea, how you can do shell authorisation customisation.

https://www.youtube.com/watch?v=DlzALGHZ0o4