aaa authorization console Note that you most likely can replace the Service-Type = NAS-Prompt-User, Cisco-AVPair == 'shell:priv-lvl=15', combination with a simple Service-Type := Administrative-User Bjørn