Cisco 2100 Series Configuration Manual page 210

Configuring TACACS+
Figure 5-8
Under TACACS+ Settings, check the ciscowlc common check box.
Step 20
Check the Custom Attributes check box.
Step 21
In the text box below Custom Attributes, specify the roles that you want to assign to this group. The
Step 22
available roles are MONITOR, WLAN, CONTROLLER, WIRELESS, SECURITY, MANAGEMENT,
COMMANDS, ALL, and LOBBY. As mentioned previously, the first seven correspond to the menu
options on the controller GUI and allow access to those particular controller features. You can enter one
or multiple roles, depending on the group's needs. Use ALL to specify all seven roles or LOBBY to
specify the lobby ambassador role. Enter the roles using this format:
rolex=ROLE
For example, to specify the WLAN, CONTROLLER, and SECURITY roles for a particular user group,
you would enter the following text:
role1=WLAN
role2=CONTROLLER
role3=SECURITY
To give a user group access to all seven roles, you would enter the following text:
role1=ALL
Note
Cisco Wireless LAN Controller Configuration Guide
5-22
Group Setup Page on CiscoSecure ACS
Make sure to enter the roles using the format shown above. The roles must be in all uppercase
letters, and there can be no spaces within the text.
Chapter 5 Configuring Security Solutions
OL-17037-01