Role/User creation

[Fred Bingman]

Is it possible to create a role or user that

can have limited rights to make changes and still be able to change

their own password.  The default roles don't allow this

without being admin.  I was looking at creating a new role,

BUt have very little knowledge as to what rules should be engaged to limit the

ir access and still be able to change password.

Thanks,

Bing

[Fred Bingman]

Ok,

Let me rephase this question a bit.  I have a user in the network operator role.  Using device manager I need to have this user be able to change their password.  It is possible for them to change it using the CLI.

Thoughts??

Bing

[bfeeny]

If you are using TACACS+ (ACS) you can allow the user to change their password, see the password aging section of this document:

http://www.cisco.com/en/US/products/ps5989/products_configuration_guide_chapter09186a008074a898.html#wp1737370

Brian