allow all show command for an user

[pugliededaniele88]

Dear all,

I need to create an user that can have the permission to do all show command on my device. I have an ASA IOS 9.2.

I already see some other guide but all guide explain how permit single show command.

What can do to gain this ?

Thank you,

Daniele.

[Abheesh Kumar]

do you have any aaa-server configured..???
If you have a tacacs server you can do the show command filter with that, or you need to allow privilege 15 to that particular user.

[pugliededaniele88]

no I am using local authentication

[Abheesh Kumar]

privilege 15 is required to execute show run command, If allow privilege 15 that user can able to go to config mode as well.

HTH

Abheesh 

[pugliededaniele88]

I need that the user can run all show command but can't go in configure terminal mode

[Sheraz.Salim]

the ASA does NOT support views.as you dont have AAA you can not achieve this

Although if you want to restrict access to the device then you can use AAA

[Abheesh Kumar]

Integrate with a tacas server to achieve this.

HTH
Abheesh