Is there management software for Role-based Access to Switches/Routers

[Alan Reidy]

I need to setup Role-based access for Helpdesk and Desktop Support guys. I know i can do this with 'views' but i need to have a log of who made changes and the changes that were made. If possible i would like to only give access to local resources as we have over 2000 switches i don't want everyone to be able to access all switches, just their own office switches. We use AD so this could be part of it. Any software that could make this a little less tedious to setup would be great... Any advice welcome.

[Mark Malone]

Archive change logging and notification setup can do that show who logged in and what they did without any software below links show examples of how to setup and what it shows , or else you could use Cisco prime software as an example but you will need a license for 2000 switches

http://itknowledgeexchange.techtarget.com/cisco/tracking-configuration-changes-with-the-cisco-ios-built-in-using-the-archive-command/

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/config-mgmt/configuration/xe-3s/config-mgmt-xe-3s-book/cm-config-logger.html