Privilege level definitions

jtrumbell · ‎06-21-2007

I manage the network devices for a sister company. Their technical staff would like to use Cisco Network Assistant to view into the switches. I have no problem granting them read access, they have requested level 14 access. Is there any such document that explains what can be done at the variours levels. In short, I want them to be able to use the tool, but not make any changes, view or download the config or in any way compromise the box. Thanks for any assistance you can provide.

Edison Ortiz · ‎06-21-2007

At privilege level 14, you will have to manually include all the commands they need access to in the config.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cr/hsec_r/sec_p1h.htm#wp1147276

jtrumbell · ‎06-21-2007

thanks

jtrumbell · ‎06-21-2007

I was wondering if a id has level 1 privedges, and from telnet perform a 'show int' cmd. Yet in the Http access it returns a level 15 password required. how come?

Jagdeep Gambhir · ‎06-21-2007

Http access is always Priv lvl 15. Only user with priv lvl 15 can access http.

Regards,

Jagdeep

jtrumbell · ‎06-21-2007

So that would mean most things in CNA would error out unless you had the level 15 passwords. correct?