Cisco AV-Pair to controll the maximum privileged level

[hmrsfelder]

Hi,

currently I setup an ACS 5.3 for device administration of access-switches.

To controll the privileged access to this devices I restrict the operator accounts to privileged level 1 using the av-pair"shell:prvl-lvl=1".

Additionally i want to restrict the maximum privileged level like a shell profile.

Device Administration service using RADIUS protocoll with network authorization profiles.

Question: Is there an av-pair available to define the  maximum privileged level by shell ?

Regards

Holger