I need one user to acesss only sh run .
The command I used was
aaa-server LOCAL protocol local
aaa authorization command LOCAL
username tester password tester encrypted privilege 3
privilege show level 3 command running-config
But he is able to view all other commands
Thanks for ur help