Set command to different privilege level

[jeff.cook]

Is anyone setting commands to different privilege levels without TACACS+?

I am looking at setting this up so the helpdesk can enable ports and set the vlan, but can't get full admin ability.

I have 34 access switches I would like to add this to.

Please let me know your thoughts.

[drolemc]

Prior to the introduction of this feature, each command in a privilege level had to be specified with a separate privilege command. This feature introduces a "wildcard" option that allows you to configure access to multiple commands with only one privilege command. By using the new all keyword, you can specify a privilege level for all commands which begin with the string you enter. In other words, the all keyword allows you to grant access to all command-line options and suboptions for a specified command.