Cisco IOS XR and ISE 3.0

[AZRT]

Hi there,

I have cisco ncs540l  and cisco ise both configured and AAA with tacacs working well,
How ever i need to create user for Cisco EPN manager for authentication and collection data from routers. 
This user should have only show command on any level , i created readonly task and user  group. now the question is How to apply this group through Cisco ISE 3.1
I have no tacacs+ profiles in ISE i do not know what i need to input to the profle.
Kindly ask you support 
Thanks.

[balaji.bandi]

The user required Priv 15 level access, so the user you loging should be admin access.

where is the user located Local or AD ?

[AZRT]

User located in AD .

[AZRT]

Any suggestions?

[balaji.bandi]

yes based on the user group you can create a new policy.