Moving a Command from EXEC Privilege Mode to EXEC ModeTo move a command from EXEC Privilege to EXEC mode for a privilege level, use the privilege execcommand from CONFIGURATION mode.In the command, specify the privilege level of the user or terminal line and specify all keywords in thecommand to which you want to allow access.Allowing Access to CONFIGURATION Mode CommandsTo allow access to CONFIGURATION mode, use the privilege exec level level configurecommand from CONFIGURATION mode.A user that enters CONFIGURATION mode remains at his privilege level and has access to only twocommands, end and exit. You must individually specify each CONFIGURATION mode command youwant to allow access to using the privilege configure level level command. In the command,specify the privilege level of the user or terminal line and specify all the keywords in the command towhich you want to allow access.Allowing Access to Different ModesThis section describes how to allow access to the INTERFACE, LINE, ROUTE-MAP, and ROUTER modes.Similar to allowing access to CONFIGURATION mode, to allow access to INTERFACE, LINE, ROUTE-MAP,and ROUTER modes, you must first allow access to the command that enters you into the mode. Forexample, to allow a user to enter INTERFACE mode, use the privilege configure level levelinterface tengigabitethernet command.Next, individually identify the INTERFACE, LINE, ROUTE-MAP or ROUTER commands to which you wantto allow access using the privilege {interface | line | route-map | router} levellevel command. In the command, specify the privilege level of the user or terminal line and specify allthe keywords in the command to which you want to allow access.To remove, move or allow access, use the following commands.The configuration in the following example creates privilege level 3. This level:• removes the resequence command from EXEC mode by requiring a minimum of privilege level 4• moves the capture bgp-pdu max-buffer-size command from EXEC Privilege to EXEC mode byrequiring a minimum privilege level 3, which is the configured level for VTY 0• allows access to CONFIGURATION mode with the banner command• allows access to INTERFACE and LINE modes are allowed with no commands• Remove a command from the list of available commands in EXEC mode.CONFIGURATION modeprivilege exec level level {command ||...|| command}• Move a command from EXEC Privilege to EXEC mode.CONFIGURATION modeprivilege exec level level {command ||...|| command}• Allow access to CONFIGURATION mode.CONFIGURATION modeprivilege exec level level configure58 Management
