Provide level 7 access to https management

[Jason Fraioli]

I currently have the following config for level 7 access. I just want the level 7 folks to be able to enable/disable ports and to add descriptions to interfaces. It works fine if I SSH to the switch, however, it wants level 15 access for the HTTPS management. Any idea how to enable HTTPS access for the level 7 folks?

privilege exec level 7 show

privilege exec level 7 configure terminal

privilege configure level 7 interface

privilege interface level 7 shutdown

privilege interface level 7 description

[Edison Ortiz]

Hi Jason,

I'm afraid is not possible. In order to access the http files in the router, the user must have a high level authentication.

One way to make simple management for novice users while keeping some kind of privilege security, is by implementing menus in the router.

http://www.cisco.com/en/US/docs/ios/12_4/cfg_fund/configuration/guide/cfh400_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1001601

HTH,

__

Edison.

[Jason Fraioli]

looks like a viable option, although I can't figure out how to associate the menu to a login privilege. Do you have any advice on how to accomplish that? The documentation really doesn't discuss that at all.

[Edison Ortiz]

The menu will be used instead of the login privilege.

The users will be only be able to perform tasks within the menu.

HTH,

__

Edison.