Restricting Device groups access in ACS 4.0 SE

[royalblues]

Can i have logging limitation configured on the groups in Cisco ACS 4.0 SE

Heres what i want to achieve.

There will be two groups siteA and siteB

I also create 2 network device groups say NDG1 and NDG 2

Now the users in the SiteA should be able to access devices associcated with both NDG1 and NDG2

But users in SiteB should be able to access only devices associated with NDG2 and ny ACS should not authenticate them when they try to log on to any device associated to NDG1

With my current configuration, the user in NGD2 gets a user prompt for the NDG1 devices.

Thanks in advance

Narayan

[a.kiprawih · Accepted solution]

Hi Narayan,

Pls take a look at the following post:

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB?cmd=pass_through&location=outline@^1@.1ddb89cb/0#selected_message

Rgds,

AK

[royalblues]

sure Amrih,

I will check that out and let you know.

Narayan

[royalblues]

Thanks Amrih,

That worked out although the properties were on the user settings than on the group settings

Narayan