Hi Rodjeur70,its correct you have to use the "Passport-Access-Priority" attribute but with a value of "1" for read-only and a "6" for read-write-all:Passport-Access-Priority=1That works fine for me:C-5520-1:1>show usersSESSION USER ACCESS IP ADDRESSC...