Read only Access ACS 5.3

[abukuru95]

Hello Guys,

I am using ACS 5.3 with the internal Database for user authentication, I would like to attribute to some users read only rights on the systems.

what is the best way to do this ? by not configuring an enable password for these users? or is there a better way of doing this?

thanks in advance.

[Jatin Katyal · Accepted solution]

Are you thinking to give read-only access on the devices like router/switches/firewall?

If yes then we have only one best option is to configure ACS and devices for command authorization.

ACS 5

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/user/guide/common_scenarios.html#wp1052579

Config needed on devices:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#rou

If you've any specific question or some setup is not working, do post it here.

Regards,

Jatin

Do rate helpful posts-

[abukuru95]

Thanks for the response jkatyal