Switch Administration - Restricted Roles

[oneirishpollack]

I would like to allow some of our techs to have the ability to change the VLAN assignment for ports on access switches, but little else. Is there a preferred method to give them this access without compromising much else?

I have read about Role-based CLI access - any thoughts?

I want to make it as simplistic as possible, but without giving them the ability to change passwords, user accounts, and/or much else.

[Marvin Rhoads · Accepted solution]

Yes role-based CLI is one good route to implement what you describe.

The User Security section of the IOS Configuration Guide covers the necessary syntax.

You can also create custom privileges and assign users to those privilege levels. That approach is descrtibed elsewhere in the same book.

I'm not sure I'd say either has a particular advantage over the other.

[oneirishpollack]

Thank you for taking the time to reply.