1 - breath... breath... breath...
2 - yes, I am allowing access on this role. Its the same role that the other device types get which is why I am so puzzled on this one, but I see where you are coming from.
3 - I have not gone all CLI commando yet as I am not sure specifically I need to be looking at. I'll take a look at that since you suggested it, thanks :-)