I’m pretty sure this is exactly what they are talking about. I just now ran across this thread because I too have come across a need to return custom attributes to indicate whether the user has ReadOnly or ReadWrite access to the device. The device in this instance is a Cisco Wireless LAN Controller, which requires a return attribute to let users login…