Cisco 2960x web console login user privilege level

[bijay.swain]

I enabled http server on Cisco 2960x switch it is working fine with the login user as privilege level 15 access. but i want to restrict the user for view only. once i change the privilege level to 0 the user is not able to login to the switch through web.

what privilege level should i assign to the user to login as view only access.

IOS ver.:  c2960x-universalk9-tar.152-7.E4

[balaji.bandi]

Priv 0 is readonly and you need to give some access required for user.

is this for Web access or Console access ?

Look at some tips :

https://learningnetwork.cisco.com/s/blogs/a0D3i000002eeWTEAY/cisco-ios-privilege-levels

tell us what is the user requirement (if you do not like admin level) you looking to implement, so we can suggest some config.

[bijay.swain]

this for Web access . and user can show the configs including port and vlan configs .no admin access.

[balaji.bandi]

For this model, i am not a great fan of GUI when come to Cat 2960, we do more on cli level

you can give privelege access for the user what he can only access, even though he has elivated access - he can not access what mentioned in the command task lists.

[bijay.swain]

how to restrict a user to change any configuration

[balaji.bandi]

how to restrict a use unable to change any configuration

Look at the below guide : (Hope you are using local authentication)

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_0100.html