ACS4.2

[prashantrecon]

I have devices added to ACS.Most of the usres have authentication to that.

My requirement is only few users such as x and y should able to autehnticate that devices,

[Chris Illsley]

Depends what you are trying to do, if it is just device authentication in the group set up set the Default Group to disabled so they are denied access and then create a new group fro device admin, enable it and your users to it either by a group mapping or adding them manually:

User Setup -> Select User -> Group to which the user is assigned:

Thanks

Chris

[Jatin Katyal]

You can implement Network access restriction (NAR) feature on user or group level.

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a00801a8fd0.shtml

~BR
Jatin Katyal

**Do rate helpful posts