WLC9800 not showing configuration and administration via webgui

[hfaisca]

Hello,

I'm having an issue after login via TACACs on webgui, it is not showing "Configuration" and "Adminstration" tabs. 

aaa group server tacacs+ TAC_GROUP
server name TACACS_SVR_1
server name TACACS_SVR_2

aaa authentication login default local
aaa authentication login VTY local group TAC_GROUP
aaa authentication login AUTH_LIST_GUEST group RADIUS_GROUP
aaa authentication login HTTP local group TAC_GROUP
aaa authentication dot1x AUTH_LIST_DOT1X group RADIUS_GROUP_CORP
aaa authorization exec default local if-authenticated
aaa authorization exec VTY local group TAC_GROUP if-authenticated
aaa authorization exec HTTP local group TAC_GROUP if-authenticated
aaa authorization network AUTH_LIST_GUEST group RADIUS_GROUP
aaa accounting identity AUTH_LIST_GUEST start-stop group RADIUS_GROUP
aaa accounting exec default start-stop group TAC_GROUP

ip http server 
ip http authentication aaa login-authentication HTTP
ip http authentication aaa exec-authorization HTTP
ip http authentication aaa command-authorization 15 TAC_GROUP
ip http secure-server

[marce1000 · Accepted solution]

 - Usually that happens when full admin privileges' are not returned with the RADIUS based authentication, you will have to configure radius to return or include this attribute :                         Cisco-AV-Pair:   shell:priv-lvl=15

 M.

[Prince.O]

Exactly as @marce1000 mentioned, TACACS needs to return privilege 15. If you had a previous AireOS controller, this will be different than the 9800 as far as attributes that are understood. Refer to the guide below that shows an example configuration of the TACACS configuration that needs to be applied for the 9800 to understand: 

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214490-configure-radius-and-tacacs-for-gui-and.html

[Rich R]

As Marce said and also you might be trying to do more authorization than is supported on GUI.
See https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214490-configure-radius-and-tacacs-for-gui-and.html#toc-hId-2036691447