Set Management / Network access permissions using radius.
Set super-user / read-write / read-only permission using radius.
Authentication access type not as expected.
Management access level not as expected.
The authentication access type is configured at the Radius server, tied to the user's associated group. It's here that you may specify '
Unless the managed device has a similar configuration granularity, it will either be able to Radius-authenticate both management and network access, or neither (5677).
Also configured at the Radius server, and relevant to the first two options above, is the management access level (
See also: 5532.