ACS AD authentication

control

I'm looking to configure a bunch of routers to use an ACS server which is integrated with AD for user access. That part is fine.

I have one certain router that i only want one person to have access to via ACS TACACs authentication.
All other routers, I have another group of people who I want to give access to via same method.


How can I achieve this? Simple enough to do?
ACS version 4.2.

jason_lunde

yep, stick the user in a different group in ACS, and then identify the IP addresses that the group has access too.