Privilege Level with thier functinality

[Rahul Chauhan]

Hi,

Is there anyone who can tell me exact functionality of each privilege level like what we can do at level 1 up to 15 levels.

Thanks

[Julio E. Moisa · Accepted solution]

Hi Rahul,

Actually you have privilege level from 0 to 15, where 0 represents no access just to few commands, around 5,  Level 1 will provide access to Exec mode only. Level 2 adds others command but you still don't have access to configure the device. 

Then you have the level 15 where you will have access to everything.

Now the rest of the levels can be used for specific tasks and customizables through the command: 

Privilege <mode> level <level> <command to do>

example: privilege exec level 7 traceroute. 

Hope it is useful

:-)

[Joseph W. Doherty]

By default, and as mentioned by Julio, level 15 is the all commands privilege level. Level 1 is the "user" level, which allows you to "view" much, but pretty much change nothing. Level 0 doesn't allow much beyond logging off or using the enable command (to change your level).

As also mentioned by Julio, you can configure what different privilege levels allow, including even blocking commands at level 15 (making some unavailable at all).

I recall (?), at any privilege level, if you enter the question mark, you should see a list of allowed commands for that privilege level.

[burleyman]

This link may help.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_011.pdf

Mike