[c-nsp] Privilege levels and Secure ACS

Scott Altman staltman at gmail.com
Tue Jul 5 11:58:37 EDT 2005


You have everything set up, you just need to configure "Shell Command
Authorization Set" in ACS.  This is a section of the Group
configuration, it lets you correlate NDGs to Command Sets.

So in your example, you can associate PE's to command set All and P to
notAll and do this per group, so your NOC users (or whomever) would
have the appropriate rights and Core would have different rights,
etc...

On 7/5/05, Kim Onnel <karim.adel at gmail.com> wrote:
> How can I let users group (NOC) use the conf. set (all) on NDG: (PEs) and
> when accessing NDG: (P) use the conf. set (notall)



More information about the cisco-nsp mailing list