Need to allow a particular user to directly access ASA in enable mode and have only show command access

[sameer.dy09]

hi , 

I am running ASA version 9.1 , authenticated via ACS 5.6 . All users are authenticated via ACS and acs is linked with AD . Everything is running good, recently we have added a particular account in AD , we need that user to directly access in enable mode and have only show commands access

I researched and found that we have auto-enable command in 9.2 which will have user to directly access enable mode . Please let me know the following

1) Is there a way to only allow that particular user to directly access ASA in enable mode with limited access

2)Documentation for shell access not clear , any steps line by line would be highly appreciated as we dont want to make any disruptive change

Regards,

SAM

[Collin Clark]

You will need to put that particular user into a different privilege level and put the necessary show commands there. Sorry I don't know of any step-by-step directions.

[sameer.dy09]

Thanks for your reply ,