Cisco ASA Series Cli Configuration Manual page 1020

Configuring AAA for System Administrators
Command
Step 1
privilege [show | clear | cmd] level level
[mode {enable | cmd}] command command
Example:
hostname(config)# privilege show level 5
command filter
Cisco ASA Series CLI Configuration Guide
1-26
Chapter 1
Purpose
Assigns a command to a privilege level.
Repeat this command for each command that you want to
reassign.
The options in this command are the following:
•
show | clear | cmd—These optional keywords let you set the
privilege only for the show, clear, or configure form of the
command. The configure form of the command is typically
the form that causes a configuration change, either as the
unmodified command (without the show or clear prefix) or as
the no form. If you do not use one of these keywords, all
forms of the command are affected.
•
level level—A level between 0 and 15.
•
mode {enable | configure}—If a command can be entered in
user EXEC or privileged EXEC mode as well as
configuration mode, and the command performs different
actions in each mode, you can set the privilege level for these
modes separately:
–
enable—Specifies both user EXEC mode and privileged
EXEC mode.
–
configure—Specifies configuration mode, accessed
using the configure terminal command.
•
command command—The command you are configuring.
You can only configure the privilege level of the main
command. For example, you can configure the level of all aaa
commands, but not the level of the aaa authentication
command and the aaa authorization command separately.
Configuring Management Access