privilege for show commands

carl_townshend · ‎05-06-2009

Hi all, is there a priv level I can give to my users to only allow them to do certain show commands ?

Collin Clark · ‎05-06-2009

You need to "move" the show commands to another privilege level then assign the user to that level.

jtalbaugh · ‎05-06-2009

For example:

Router(config)#privilege exec level 4 sh run

Router(config)#username cisco privilege 4 password cisco

carl_townshend · ‎05-07-2009

what is the enable level for then? can I not use this ?

bretjaquish · ‎05-07-2009

Enable level is level 15.

You can create a new user with a level lower than that.

Then you will need to associate the show commands to the appropriate level.

Keep in mind that the sh run output might not show everything, because each command shown in the config would need to be authorized for the restricted user to see it.