tacacs: privilege levels

[ronen8250]

I use tacacs+ server on my network.
I want to set some users to view-only (all the commands starting with "show")
Example: "show running-config"
But I want those users can also use the command "terminal legnht"
How do I do that?

[nspasov]

With TACACS+ you can do command level authorization. Thus, you can provide users with priv-level-15 but then restrict command access to just "show run" and "terminal length"

Thank you for rating helpful posts!