Hello again,

I am looking for documentation on configuring user groups for radius authentication.

My goal is to allow admins, based on active directory group membership, to manage all facets of the switch. I would also like to allow limited management functionality to "sub-admins" also based on active directory group membership.

Is there documentation out there that shows how to grant a group access to certain commands? Is this controlled through radius, or would this be IOS controlled?

Thanks for your help!