Hello all, I hope I can relay this problem clearly, as it is confusing me!
I have a command authorization set on my ACS that allows my junior admins to login to a pix through ASDM. One command in this set is "write net" which seems necessary in order for ASDM to get and display the configuration from the pix. I don't want my junior admins to have access to this command, but, if I remove it from the command authorization set, ASDM will not startup upon a junior admin logging in. I check my failed attempts log and see that the write net command is unrecognized after this command is removed.
Why is the write net command issued upon login for authentication? Why does ASDM need this command? Is there a way around this.
