How is this accomplished without creating too many objects using Cisco ISE?

An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands

How is this accomplished without creating too many objects using Cisco ISE?
A . Create one shell profile and multiple command sets.
B . Create multiple shell profiles and multiple command sets.
C . Create one shell profile and one command set.
D . Create multiple shell profiles and one command set

View Answer

Answer: A

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html https://www.youtube.com/watch?v=IlZwB71Szog&ab_channel=JasonMaynard