switch username creation privilege

[Satish Sah]

Hi Team,

Need your help in creating a username in Cisco 2960 switch. 

username: admin

password : Cisco123

Requirement : user should have read and write access but must not be able to create a new user or delete an existing user . They should not able to change the privilege of other users.

Please suggest the best method...!!!

with best regards

Satish Sah

[Milos Megis]

Hi,
the best method is use of TACACS server where you can define privileges.

Using privilege level on switch is hard usable in this situation because you need to configure it for each switch. Also if you cannot use privilege level 15 then you must specify lower level and specify all commands which can be used. It is easy to allow only few commands but all except few take a long time (you must allow each one explicitly) and configuration file will look awfully.

Or you can use RADIUS server for authentication and assign full admin rights. So user can do anything in configuration but he will not have access to radius for modifying of users.