Allo only show command

[Marcin Brzeski]

I've just created a local user on router but whoever uses that account I  would like them only have access to show commands and that's all no  other commands. Can someone please guide me on how to accomplish this?

Thanks!

[Gregory Snipes]

Role based CLI access would be great for this, but is a relatively recent addition to IOS, you need to be running 12.3(7)T or newer.

If you have a vertion of code that supports it, here is a good presentation on configuring it.

[Reza Sharifi]

If you want the person to have access to show commands, you can give him privilege 3

example

user test pass test123

user test privilege 3

if you want user test to be able to see the config also, you can add this command:

privi exe leve 3 show configuration

HTH