Hello cmac,
By default the router takes priviledge levels 1 and 15. you can define ur own levels using the privilege level commands.
privilege interface level 5 shutdown
privilege interface level 5 no shutdown
privilege interface level 5 description
privilege configure level 5 interface
privilege exec level 5 configure terminal
in this example, the user will be able to do only a shut, no shut and change the description of an interface.you have to associate the username with the levels.
username admin privilege 15 password ****
username helpdesk privilege 5 password ****