I have an IOS config/Secure ACS server question. If I want local users set up on a switch to log in and go straight to the Enable prompt (Privilege level 15), and have 2 different groups of users authenticated through Secure ACS to a Windows database set into 2 different groups, one with full level 15 access, and one group with Sh command access (including sh run), what would be the best way of setting this up? I have tried several different config options, but cannot make it work completely.
Thanks for your help!