"Guest user with limited (show) access via PrivacyIDEA + FreeRADIUS + LDAP?"

Hello,

I have integrated PrivacyIDEA with FreeRADIUS.
User accounts are synchronized via LDAP and are currently all registered in the system.

I would like to use RADIUS authentication for network devices,
and I plan to separate accounts into three types:
admin accounts, guest accounts (with show-only permissions), and blocked accounts.

I created a guest user and added it to the appropriate group, but I’m not sure where I need to configure it to allow only “show” permissions.

Any help would be greatly appreciated.

Thank you!

What exactly do You mean with “show-only” permissions? The capabilities of the (guest-) user on the device?
You probably need to configure an attribute mapping in the RADIUS server: RADIUS plugin — privacyIDEA 3.11.4 documentation