access-levels

This command configures the TACACS+ Access Level Mapping table, which maps TACACS+ privilege (priv-lvl) values to the device’s user levels Security Administrator, Administrator, and Monitor. The table is a child of the TACACS+ Servers table (see tacacsplus-servers).

Syntax

(config-system)# tacacs-settings
(tacacs)# tacacsplus-servers <Index>
(tacacsplus-servers-<Index>)# access-levels <Index>
(access-levels-<Index/Index>)#

Command	Description
Index	Defines the table row index.
access-level {admin|monitor|security-admin}	Defines the device's user level that you want mapped to the specific TACACS+ privilege level.
privilege-level <1-15>	Defines the TACACS+ privilege level (priv-lvl) that you want mapped to the specific device's user level.

Command Mode

Privileged User

Example

This example maps the TACACS+ privilege level 1 to the device user level Monitor:

(config-system)# tacacs-settings
(tacacs)# tacacsplus-servers 0
(tacacsplus-servers-0)# address 150.5.6.7

(tacacsplus-servers-0)# port 45

(tacacsplus-servers-0)# interface-name ITSP

(tacacsplus-servers-0)# server-timeout 5

(tacacsplus-servers-0)# shared-secret P@ssw0rd$ecret2026!
tacacsplus-servers-0)# access-levels 0
(access-levels-0/0)# access-level monitor
(access-levels-0/0)# privilege-level 1
(access-levels-0/0)# exit
(tacacsplus-servers-0)# exit
(tacacs)#