aaa authorization commands with ACS 5.1

[sidcracker]

Hello,

I am configuring ACS 5.1 to allow device management of cisco devices. However I am facing issues with the Command set on the ACS 5.1.

I am allowing certain commands on the ACS to be allowed by certain set of users. I am unsure which privilege levels are associated with which commands, so in that case do I have to allow the following on the Cisco IOS

aaa authorization config-commands

aaa authorization commands 0 default  group tacacs+ local
aaa authorization commands 1 default  group tacacs+ local

......level 2

...... level 3 and so on upto

aaa authorization commands 15 default group tacacs+ local. I am very much confused with this

Thanks

[PAUL GILBERT ARIAS]

You can just enable level 0,1 and 15. Those are the default levels used by the commands. The other levels are mainly used for custom privilege levels.