PIX authorization

[bgrove2913]

I have following configured on the PIX:

user user1 password cisco1 privilege 1

user user15 password cisco15 privilege 15

aaa authentication telnet console LOCAL

aaa authorization command LOCAL

I used both user1 and user15 login(via telnet), there's no difference between these 2 users in term of privilege level.

Is this the correct way to do authorization on PIX? I would like to let some users to only be able to look at the ocnfigurations, and let other users to be able to change the configuration. How can I do that?

Thanks

[didyap]

Follow these steps to configure Telnet console access:

Authentication Steps For Local Usernames

(config)# username user1 password cisco1 privilege 15

(config)# aaa-server LOCAL protocol local

(config)# aaa authentication telnet console LOCAL

[bgrove2913]

I have no problem with Authentication. My question is how to configure the authorization on PIX. It seems the local authorization doesn't work.