Hi Rick,
Thanks a lot for responding.
My account has all the relevant permissions in ACS/TACACS. When I SSH into the switches I can run all commands no problem.
I suspect my AD account and how it is being interpreted in NCM is not giving me the correct permissions. As when i login to NCM its using "DOMAIN\username", where as when i login to the switches by SSH the domain is already implied.