Best practices for implementing Cisco ACS?

[Adrian DuPre <adrian.dupre () zimmer com>]

Has anyone successfully (or not-so-successfully) implemented Cisco ACS 
for granular control of router access?  We're looking to define access 
levels for local/remote IT staff based on job function.  What 
tips/tricks/resources/best practices did you find?  (Aside from the 
"Fine Manual")

Thanks in advance,
-Adrian