Cisco Cisco IOS Software Release 12.0(22)S

To set the privilege level for a command, use the privilege (global) command in configuration mode. 
Use the no form of this command to revert to default privileges for a given command.

privilege mode [all {level level}] | [reset command]

no privilege mode [all {level level}] | [reset command]

No default behavior or values.

Global configuration

The password for a privilege level defined using the privilege global configuration command is 
configured using the enable password command.

Level 0 can be used to specify a more-limited subset of commands for specific users or lines. For 
example, you can allow user “guest” to use only the show users and exit commands.

To change the privilege level of a particular command or its suboptions, use the all keyword.

There are five commands associated with privilege level 0: disable, enable, exit, help, and 
logout. If you configure AAA authorization for a privilege level greater than 0, these five 
commands will not be included.

When you set a command to a privilege level, all commands whose syntax is a subset of that command 
are also set to that level. For example, if you set the show ip route command to level 15, the show 
commands and show ip commands are automatically set to privilege level 15—unless you set them 

Configuration mode. See Table 1 in the “Usage Guidelines” section 
for a list of options for this argument.

(Optional) Changes the privilege level for all the suboptions to the 
same level.

Enables setting a privilege level with a specified command. 

 specifies the privilege level associated with a command. You can 
specify up to sixteen privilege levels, using numbers 0 through 15.

 (Optional) Resets the privilege level of a command.

Command for which you want to reset the privilege level.

10.3

This command was introduced.

12.0(22)S

The all keyword was added.