command authorisation in 8.4 for object network

[uzbrdicanagib]

Hi guys,

I just tried to do a quick privilege level setup for a user to limit access to asa. User should be able to add nat's to configuration.

ASA 8.4 is in question and trying the following does not seem to work:

privilege configure level 3 command object

gives me :

ERROR: specified command 'object' not found in any mode.

It looks like localy this cannot be done or I am doing something wrong?

Thnx...

[Maykol Rojas]

Hi

Remember that there is object-group and Object network, can you try to put Object Network and avoid any confusions of the ASA? Or maybe Add both? Or better Yet, if he wants to create a nat, he will need to add the NAT commands inside the object or global configuration mode. Try to narrow it down to NAT command only.

Mike.