Device Admin Authorization Policies in TACACS+ for Switch Access Control : IT Help Desk

Device Admin Authorization Policies in TACACS+ for Switch Access Control

Modified on: Fri, 5 Sep, 2025 12:15 PM

The ISE TACAS policies above are linked to AD account groups located under MOPT - System - Cisco - ISE.

The ISE Super Admin and Switch Admin groups have been assigned Privilege 15 with full administrative access.

The Switch_ReadOnly group has been assigned Privilege 1 (read-only) and is restricted to the following commands:

show running-config
show startup-config
show version
show ip interface brief
show interfaces
show vlan
show cdp neighbors
ping
traceroute

Was this answer helpful? Yes No

Related Articles