Not that I an aware of. You can set a TACACS attribute do they can gain read only with their AD credentials. Of you're already using TACACS for LAN admin they would just login like a switch or router.
Steve
Sent from Cisco Technical Support iPhone App
HTH,
Steve
------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered