@JaVa808  It's (assigning priv 15 and restrictive command-set) not a "hack" (workaround). It's a legit method of doing things while maintaining access control. In the article you linked, they mentioned the following: If you have Cisco ACS (TACACS+) s...