Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

user access on css 11000

My goal is to create a user account that has the ability to suspend services and that's about it. The type of user I need to allow access is either the sysadmins for the web servers or the NOC to disable a machine for maintenance. I haven't found any useful information in the "user profile" section of the command reference. As of now I've setup super-user access, but that is less than ideal for my environment. Any help would be appreciated. Thanks

Cisco Employee

Re: user access on css 11000

I believe you will need TACACS+.

ieffa(config)# tacacs-server authorize ?

config Authorize configuration commands

non-config Authorize non-configuration commands

On the TACACS server, you control the authorization of every single command you want.


New Member

Re: user access on css 11000

Thanks Gilles, I was hoping there were some config command levels already setup. That's a better route anyway since it'll give me more control over what's changed in the network. Implementing TACACS+ will just have to go on my project list.