Radius Server auth with Cisco Ise

Hello,
Need help to achieve next task : Configured AAA  with Radius. Radius Server is Cisco ISE. We've configured authentication and succeeded at this step, but we have this kind of problem with authorization. No matter how we Change VSA on Cisco ISE (We've tried those examples : shell:priv-lvl=15 , shell:role=sysadmin, shell:roles=sysadmin) but result is same, user is granted privilege level 1 from Radius.