Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc.,

What is the minimum enable level we need to grant to the service account? If the answer is too subjective, I atleast want to know what is the minimum enable required for Cisco IOS devices.

share|improve this question
up vote 1 down vote accepted

You can use the command: privilege exec level 6 show running

user joe pass whatever priv 6

joe should be able to do the show run config command

share|improve this answer
To expand on this; the more system:running-config command may be more appropriate for backups since it fully reports some of the encryption key and password information that's otherwise obscured in a standard show running-config. If you're using a tool like RANCID, the set of commands that it wants to run is significantly larger, as well. – Shane Madden Jun 15 '11 at 17:00
If I understand correctly, we are assigning custom privilege levels to restrict permitted commands that can be run. Is there anything similar for Juniper equipments? that is the only other major equipment that I am maintaining. – Benny Jun 15 '11 at 18:59

As far as I know, enable/privilegie level 15 is required.

share|improve this answer

For Juniper, you must be super-user class I believe:

set system login user username class super-user

this will do the trick.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.