https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775171#M35 <P>I need that the user can run all show command but can't go in configure terminal mode</P> Tue, 08 Jan 2019 15:27:59 GMT pugliededaniele88 2019-01-08T15:27:59Z https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3774962#M31 <P>Dear all,</P> <P>I need to create an user that can have the permission to do all show command on my device. I have an ASA IOS 9.2.</P> <P>&nbsp;</P> <P>I already see some other guide but all guide explain how permit single show command.</P> <P>&nbsp;</P> <P>What can do to gain this ?</P> <P>&nbsp;</P> <P>Thank you,</P> <P><BR />Daniele.</P> Fri, 21 Feb 2020 16:38:26 GMT https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3774962#M31 pugliededaniele88 2020-02-21T16:38:26Z https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775164#M32 do you have any aaa-server configured..???<BR />If you have a tacacs server you can do the show command filter with that, or you need to allow privilege 15 to that particular user.<BR /> Tue, 08 Jan 2019 15:22:47 GMT https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775164#M32 Abheesh Kumar 2019-01-08T15:22:47Z https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775165#M33 <P>no I am using local authentication</P> Tue, 08 Jan 2019 15:24:02 GMT https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775165#M33 pugliededaniele88 2019-01-08T15:24:02Z https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775168#M34 <P>privilege 15 is required to execute <EM>show run</EM> command, If allow privilege 15 that user can able to go to config mode as well.</P> <P>&nbsp;</P> <P>HTH</P> <P>Abheesh&nbsp;</P> Tue, 08 Jan 2019 15:26:43 GMT https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775168#M34 Abheesh Kumar 2019-01-08T15:26:43Z https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775171#M35 <P>I need that the user can run all show command but can't go in configure terminal mode</P> Tue, 08 Jan 2019 15:27:59 GMT https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775171#M35 pugliededaniele88 2019-01-08T15:27:59Z https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775184#M36 <P>the ASA does NOT support views.as you dont have AAA you can not achieve this</P><P>&nbsp;</P><P>Although if you want to restrict access to the device then you can use AAA</P> Tue, 08 Jan 2019 15:39:09 GMT https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775184#M36 Sheraz.Salim 2019-01-08T15:39:09Z https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775186#M37 Integrate with a tacas server to achieve this.<BR /><BR />HTH<BR />Abheesh Tue, 08 Jan 2019 15:40:32 GMT https://community.cisco.com/t5/network-security/allow-all-show-command-for-an-user/m-p/3775186#M37 Abheesh Kumar 2019-01-08T15:40:32Z