A wireless engineer must configure access control on a WLC using a TACACS+ server for...

When configuring access control on a WLC using a TACACS+ server for centralized authentication on network devices, the role value that must be configured under the shell profile on the TACACS+ server for a user with read-only permissions is “MONITOR”. This role restricts the user to monitoring functions without the ability to make changes to the configuration. References := (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)