TACACS+ Privilege Levels

Hi,

Is there any documentation that details the relevant privilege levels to set on TACACS+ when implementing authorisation via TACACS from the 4500?

I can find useful detail on Radius authorisation classes (by returning VSAs) in the admin security essentials guide, but can't find the same for TACACS. 

So what privilege levels allow read access and what allows read/write, is it as below?

 

• privilege level 1 = non-privileged (prompt is router>), the default level for logging in

• privilege level 15 = privileged (prompt is router#), the level after going into enable mode

   

 

Thanks,

Ian