Does anyone know how to limit the commands available to a single user without giving too much access to the show commands? I believe this should be exec level 6 and below.

I created a user at privledge level 0 to only issue command "show ip bgp summary"

Is there any way to remove the extra commands input by the router below? or am I going about this the wrong way? IE, do I need TACACS or RADUIUS vs. a simple username cisco privledge 0 password abcd?

the commands I am trying to remove are

**only want this one* privilege exec level 0 show ip bgp summary

**cant remove* privilege exec level 0 show ip bgp

**cant remove* privilege exec level 0 show ip

**cant remove* privilege exec level 0 show

any thoughts on how to go about this?

IOS is

c2800nm-advipservicesk9-mz.124-10a.bin