We currently use LDAP (mapped to a specific AD group) for admin access to our ASA's. I have one ASA that I would like to grant readonly access to a single user but I am having a hard time figuring out how to do that. ASDM/SSH access is via LDAP, so no local authentication unless the LDAP servers don't respond. So I dont see a way to use a local account.
Anyone have any ideas?
