Priveliged mode restrictions on Radius

[rob.lemaster]

I am trying to control privileged access on routers using Radius. CCO documentation states that the Radius method doesn't work on a per-username basis (have to use Cisco ACS Tacacs+), so I am using;

aaa authentication enable default none

And then I would like to control authorization on the Radius server. Does anyone have any suggestions or can offer a better way?

Thanks for your input.

[r-simpson]

The following document has more information on How to Assign Privilege Levels with TACACS+ and RADIUS.

http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a008009465c.shtml#t2