Can you disable all of ASDM except for the Monitoring piece? I keep trying to find information on this but am not able to locate it if it is possible at all. Any assistance on this would be greatly appreciated.
ASDM is using commands to pull information and configure the ASA. So the users and their levels that apply to the ASA are the same for CLI and A
SDM. In other words priv 3, 5 and 15 segmentation is enforced with command authorization to make ASDM be able to view configs, monitor or configure. And the same privileges will hold for the same users when they try to use CL:I.
I hope it makes sense.