I am looking for documentation on configuring user groups for radius authentication.
My goal is to allow admins, based on active directory group membership, to manage all facets of the switch. I would also like to allow limited management functionality to "sub-admins" also based on active directory group membership.
Is there documentation out there that shows how to grant a group access to certain commands? Is this controlled through radius, or would this be IOS controlled?
Thanks for your help!