Privilege Level

[bw3481]

Is there a way to set a privilege level so a user can only work with access-lists on a router. I want the user to only be able to add/change/delete access-lists but no other commands: reload, shutdown, snmp, etc...

Thanks,

[mostiguy]

Yes, it would take some work, but you could do it. Figure out what commands they would need rights to, and add them to a middling priv level

[cminch]

You might also want to check with your IOS, as there were some limitations in some. I found this out the hard way update to the 'new and improved' IOS and the authentication no longer worked. This was for http authentication giving access to access-template.

Regards,

Corey