ASR and ACS show startup not allowed

[Lost & Found]

Hi,

We have ACS integrated with our AD. We have OU Created on AD for RW and RO.

Now we permit show startup-configuration and running-config for RO user. but on asr

Result:

Show startup-config Still not allowed

show running-config only limited command has been displayed.

do we need to add privilege command on ASR? how to add priv command on priv 7?

Note: that the said command is working on other device.

Thank you

[smilstea]

Hi,

Is this for an XR device?

There is no startup-config in XR.

In XR we use taskgroups and permissions (Read, Write, and Execute) instead of privilege levels so the ACS config will be different than for IOS based routers.

You can find a guide to this here: https://supportforums.cisco.com/document/61306/asr9000xr-using-task-groups-and-understanding-priv-levels-and-authorization

Thanks,

Sam

[Lost & Found]

Yes we are using ASR9k. 

So i that case we need to create an IOS based on ASR to leverage the command from ACS.

thanks