Authorization

Hello,   I'm using TACACS+ to control access to my LTM's (Relevant device running 11.5.0HF4). I would like to allow one of my users to have a Guest TMSH account however allow him to delete the RAM...