How to disable "Show running-config" command on ASA

[Imran Ahmad]

Hello Experts,

I want to disable/block the command (show running-configuration)  for some specific users who are accessing my Cisco ASA.  Can anyone give me instruction how to do it , please.  

I dont have ACS or any radius server,  i want to do it locally by ASA

[Mark Malone]

Hey

You can do it the same as you would in IOS through local privileges/usernames and state exactly what they can access and see , doesn't require ACS all done on ASA

http://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/23383-showrun.html