File operations and configuration commands are allowed according to the user authorization level.
If the user is logged in as a level 15 user then all commands are allowed. If multiple privilege levels and/or authorization policies are applied per the aaa configuration then there are many different scenarios that can apply.