Limited command access in TACACS

[bapatsubodh]

Hi,

Is it possible to create a group that can give access to certain commands only ? Can these allowed commands be added, removed from that group. For example user ISDN_test will be made a member of a group ISDN and in ISDN we will specify all some commands which all members of ISDN group can use.

Thanks in advance

Any link on cisco.com?

Subodh

[hemendoz]

Hello bapatsubodh,

Yes you can do this. This is called command authorization. Here is an excellent link on the subject

Building a Scalable TACACS+ Device Management Framework

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a0080088893.shtml

Hope that helps! If so, please rate.

Thanks