privilege level access to manage user passwords only

[Bali Khan]

Hi, we are integrating our switches / routers into Password Access Management tool.

We need to create a user in the switch for that tool - so that when tool logs into the switch, it can only change passwords of other users. cannot do anything else

I created privilege level access

1. privilege exec level 10 configure terminal

2. privilege configure level 10 username

3. privilege configure level 10 exit

4. privilege exec level 10 copy running-config startup-congif

5. privilege exec level 10 exit

When I try above, the tool logs in with privilege access 10 but cannot change the passwords of different users. its only allowed to enter command 'username' - that its, it does not go beyond that.

I need the tool to perform this command - username ANYUSER password ANYPASSWORD

(basically change password for any user) - what I am missing in step 2. can someone please help.

Thanks

[Deepak Kumar]

Hi, 

Go to below link and will help you.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_0100.pdf

Regards,

Deepak Kumar

[Bali Khan]

Thanks I have seen the guide. Its not helpful. The issue is with that user, I cannot type anything after username. The issue is in step 2 (first post).

I want the user to be allowed 'username XX password XX' command

so that it can change any user password.