ISE 2.0: TACACS+ Command Authorization

[@toddbass10]

If you allow a config interface, does all the other commands under config interface need to be added as well, like setting an IP, VLAN, QOS, etc?

[@jeiveecee001]

I followed the limited admin config portion, but i can't make it work. the authorization logs is up to config t only. Afterwards, i can do anything on the interface level even though i denied some commands like you did. Am i missing something?

[@RaviGupta-gt2gv]

aaa authorization config-commands