user acess to firewall to view sh run only

[rajbhatt]

HI ,

I need one user to acesss only sh run .

The command I used was

aaa-server LOCAL protocol local

aaa authorization command LOCAL

username tester password tester encrypted privilege 3

privilege show level 3 command running-config

But he is able to view all other commands

Thanks for ur help

Raj

[noran01]

Try adding this:

privilege exec level 3 show running

This will only allow any user with privilege 3 to execute show run.