PIX authorization

[bgrove2913]

I have following configured on the PIX:

user user1 password cisco1 privilege 1

user user15 password cisco15 privilege 15

aaa authentication telnet console LOCAL

aaa authorization command LOCAL

I used both user1 and user15 login(via telnet), there's no difference between these 2 users in term of privilege level(always 1).

Is this the correct way to do authorization on PIX? I would like to let some users to only be able to look at the ocnfigurations, and let other users to be able to change the configuration. How can I do that?

Thanks

[mpalardy]

You might want to take a look to this URL

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_62/cmdref/mr.htm#wp1027446

Mike