Hello All,
I need to stop Imagining the idea of being able to limit the access of users to do anything in the router when they are in "write" group , when i only need them to for example ( only able to change wireless settings ) , not Routing ... etc
The User AAA need to have authorization section to confirm every command
allow anything under /interface wireless
block any attempt under /system , /ip services
block attempts to user /interface ethernet disable
.... you get the Idea
If this is not existing ( if it is , please point me to the right direction ) then consider it as a Feature Request