Shell Commands - customized help

[Amin Shaikh]

Hi,

What are the different ways of allowing privlege level to groups and users.

***Example***

Helpdesk group : priv level 2 ( view only )

Admin : Priv level 15 - complete acess

Is it possible to restrict users based on commands.

Allow users for sh ver / sh ip interface commands only

[Collin Clark]

Yes you can. If you have AAA you can restrict in there. If not you can move commands from level 15 to a lower level.

privilege exec level 0 show version

Hope that helps.

[Amin Shaikh]

Is there any option on ACS Box where you can defind commands ( sh ip interface / sh run )

and only user can run these commands.....

[chaitu_kranthi · Accepted solution]

Hi Friend,

Please visit the below link. I think it will be help full to you.

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Rate me if it is helpfull to you