I want to limit access for branch personnel to prevent them from changing configuration on Catalyst Switches, Routers and an ASA Firewall.
For Switches and Firewalls, I configured usernames with Privilege 7 and enabled local authentication (login local).
How do I do this on the ASA?
You can configure privilege levels on the ASA through the AAA configuration. Take a look at: