Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Limited command access in TACACS

Hi,

Is it possible to create a group that can give access to certain commands only ? Can these allowed commands be added, removed from that group. For example user ISDN_test will be made a member of a group ISDN and in ISDN we will specify all some commands which all members of ISDN group can use.

Thanks in advance

Any link on cisco.com?

Subodh

1 REPLY
Cisco Employee

Re: Limited command access in TACACS

Hello bapatsubodh,

Yes you can do this. This is called command authorization. Here is an excellent link on the subject

Building a Scalable TACACS+ Device Management Framework

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a0080088893.shtml

Hope that helps! If so, please rate.

Thanks

140
Views
5
Helpful
1
Replies