Using Attributes in Command Sets

[blittrell]

Hi All,

This is probably pretty far fetched but in an effort to centralizing and controlling access to network devices I have the desire to inject user attributes into ACS 5.2 command sets.  For instance, to allow a user to manage their own vlan and setting that vlan number up in their AD userid as an extended attribute.

Any ideas if you can inject an attribute into the command sets?  If so what is the syntax?

Thanks

[Jatin Katyal]

In command set you can only allow/deny command and argument for a user or group. I don't see any option to inject any additional attribute. I guess if you want a user to access a command like "interface vlan" and parameters inside it that can be done.

~BR
Jatin Katyal

**Do rate helpful posts**