now i can logon into the switch but i can with all USERS.

Yes. Because that's how you have configured it. You've set the DEFAULT to have those abilities. I would recommend reading freeradius resources and buy a book to discover/understand policies, groups etc alan