I'd like to allow junior staff to make certain changes to the configuration on our Cisco routers. I don't much like having to divulge the enable password, but if I can at least keep them to a few configuration commands, I'd feel better.
They just need to be able to be able to adjust a NAT/PAT statement in the configuration. so they'll need to be able to do the following, for example:
no ip nat inside source static tcp 192.168.1.**1** 9100 18.104.22.168 9101
ip nat inside source static tcp 192.168.1.**2** 9100 22.214.171.124 9101
Is there a way to limit them to just these types of commands? The routers are Cisco 1941s running IOS ver 15.0