How do i define radius user priv level on 2620 / restrict commands

[robdog83]

Hi All,

Can anyone point me in the right direction on how to do the following on our 2620 J9627A RA.16.03.0004;

1. I want to allow 1st line engineers to login to a pro curve with priv level 14 for example (no configuration mode access). The users currently login via Radius NPS server using the Active directory credentails. I just want to split the Junior and Senior priviledge levels so not everyone logs directly in as manager

2. Secondly I would like to define specific commands this user group is allowed access to i.e tag a port within a vlan.

I have radius setup on the device with privilage mode enabled. I'm just struggling to find a specific guide on how to implement different privledge leves / command execution.

I've read that the command exemption is using POSIX 

^conf;^vlan [1-9][0-9]*$ is this correct?

Thanks in advance

[robdog83]

I've figured it out, please close this thread.