WLC Radius Authentication
It’s possible to have a Radius server authenticate the management server.
Ofcourse you need to setup an ACS server and the WLC is going to use this server.
At the Priority Order > Management User make sure that Radius is at the top of the list.
You can set user/group IETF Radius Attributes settings for the user.
Depending of the Service type, the user got more/less rights :
Administrative -> The user got all admin rights at the WLC
Callback Administrative -> The user got lobbyadmin rights
NAS Prompt -> The user got readonly rights at the the WLC.