Switch Access for non-Admins

[oneirishpollack]

I would like to enable some of our desktop technicians the ability to change the VLAN assignment of ports on our access switches, but with the minimum amount of privileges. How would you recommend I do that?

[glenn.newman]

You can do this with the Cisco ACS server and TACACS authentication.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/user/guide/pol_elem.html#wp1077595

[Marvin Rhoads]

You can also supplement or replace Glenn's suggested approach with the use of privilege levels and roles in IOS.

One reference you can start with is here. There are many more on cisco.com and elsewhere on the web.