I have ACS/NT 2.6(4) that controls access to all my routers via TACACS+ using AAA commands in the routers. I want to set up a user that can ONLY 'reload' a router, (we have a need to reload a certain router once a week). I've gone into the USER config area of the ACS and it seems I need to give level-15 access for the user to get into enable mode, but then they have the ability to do anything they want.
Can I limit a user , once he is in enable mode, to just be able to execute the reload command?