PIX Command Authorization

[wasiimcisco]

I have cisco PIX 525. I want my junior engineer to restrict to show commands. I dont want him to configure access-list and anything else. He is only suppose to sh the running and other show commands.

I have made a user A and assign him with privilage 7. But when i log in with this user i was able to configure all things.

username A password muljoLmw8YN8dG2h encrypted privilege 7

I wana authenticate user locally and rest of all things local database. No external ACS.

kindly tell me how to configure Firewall for this thing.

[JORGE RODRIGUEZ]

Try using privilege 5 instead of 7. With 5 he should not be able to enter config mode, but do show run or show ver etc. but no configs privilege... try that.

Rgds

Jorge