<div>
Hi, 
 
First of all for a Cisco devices , controlling the user levels usually is configured by TACACS+ product. 
This product you can download from Cisco.com but it is not free. 
 
If you want to use RADIUS server to easily manage username and passwords. 
It is also possible. You have to configure RADIUS server. It may be a Microsoft IAS ( new name is Microsoft NPS). At the switch side you have to say where is the radius server located. Here is a example for 3 levels: 
 
aaa authentication login default group none 
aaa authentication login SW-Local group local 
aaa authorization config-commands 
aaa authorization exec TAC group radius none 
aaa authorization commands 0 TAC group radius &nbsp; 
aaa authorization commands 1 TAC group radius 
aaa authorization commands 15 TAC group radius 
aaa accounting commands 0 TAC start-stop group radius 
aaa accounting commands 1 TAC start-stop group radius 
aaa accounting commands 15 TAC start-stop group radius 
! 
! 
! 
ip domain-name bt.com 
! 
tacacs-server host 192.168.72.85 
tacacs-server directed-request 
tacacs-server key cisco 
! 
line vty 0 4 
&nbsp;authorization commands 0 TAC 
&nbsp;authorization commands 1 TAC 
&nbsp;authorization commands 15 TAC 
&nbsp;authorization exec TAC 
&nbsp;accounting commands 0 TAC 
&nbsp;accounting commands 1 TAC 
&nbsp;accounting commands 15 TAC 
 
 
______________ 
PS: Previously you have to prepare levels in Cisco device side. 
 
But, easyest way is to prepare all this stuff in device itself. 
Here i have attached a simple power point file. please check it. it might help you also. 
 
Br, 
<a href="https://filedb.experts-exchange.com/incoming/2016/01_w04/1074882/Module_Bonus_7_user_priviledges.pptx" target="_blank" class="file-inline" title="Module_Bonus_7_user_priviledges.pptx (742 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Module_Bonus_7_user_priviledges.pptx</a>
</div>

Module_Bonus_7_user_priviledges.pptx

<div>
<div class="content wysiwyg-content">
I want to configure RADIUS based authentication on Cisco catalyst 3650 switch [IOS-XE] with different privilege level for RADIUS users. 
 
But how to assign different privilege levels for RADIUS authenticated users ?
</div>
</div>

I want to configure RADIUS based authentication on Cisco catalyst 3650 switch [IOS-XE] with different privilege level for RADIUS users.

But how to assign different privilege levels for RADIUS authenticated users ?

RADIUS configuration in Cisco 3650 with different privilege levels

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.

Routers

Network analysis is the process of identifying and remediating the processes and systems within a network, including performance, connectivity and security. The process is performed through the use of tools developed for monitoring and analyzing network activity. Network problems that involve finding an optimal way of doing something are studied under the name combinatorial optimization. Examples include network flow, shortest path problem, transport problem, transshipment problem, location problem, matching problem, assignment problem, packing problem, routing problem, Critical Path Analysis and PERT (Program Evaluation & Review Technique).

Network Analysis

A switch is a device that filters and forwards packets of data between LAN segments. Switches operate at the data link layer or the network layer of the Open Systems Interconnection (OSI) Reference Model and therefore support any packet protocol. LANs that use switches to join segments are called switched LANs or, in the case of Ethernet networks, switched Ethernet LANs. A hub is a connection point for devices in a network. Hubs are commonly used to connect segments of a LAN. A hub contains multiple ports; when a packet arrives at one port, it is copied to the other ports so that all segments of the LAN can see all packets.

Switches / Hubs

Networking is the process of connecting computing devices, peripherals and terminals together through a system that uses wiring, cabling or radio waves that enable their users to communicate, share information and interact over distances. Often associated are issues regarding operating systems, hardware and equipment, cloud and virtual networking, protocols, architecture, storage and management.

Networking

Network Management involves issues that are independent of specific hardware or software, including email policies, upgrade planning, backup scheduling and working with managed service providers for Desktop-As-A-Service (DaaS), Software-As-A-Service (SaaS) and the like through the use of tools, coupled with manufacturer standards, best practice guidelines, policies and procedures plus all other relevant documentation. Network management also includes monitoring, alerting and reporting, management reporting, planning for device or service updates, the backup of configurations, the setting of key performance indicators and measures (KPIs/KPMs), associated service level agreements and problem records as part of the IT Service Management (ITSM) framework.