FYI - While using ACS 5.3, the attributes needed to be entered as:Attribute: cisco-av-pairRequirement: OptionalValue: shell:roles*"network-operator"Note, you can assign multiple roles by adding a space between role names (i.e. shell:roles*"network-o...