Note: All password have been replaced or redacted.
I'm trying to create a (rancid repo) account that can use the command "show run" without enabling and using a second password.
Right now, I add user lion with the command "username lion privilege 15 secret raplegend" but when I login as that user with password raplegend, I can't do the "sh run" command without doing
enable
password: reggaegod
Here are the relevant parts of the running-config file. I have replaced password hashes with fake plaintext for convenience.
version 12.2
enable secret 5 [redacted]
!
username snoop privilege 15 secret 5 raplegend
username lion privilege 15 secret 5 raplegend
aaa new-model
!
line con 0
line vty 0 4
password 7 reggaegod
transport input ssh
line vty 5 15
password 7 reggaegod
transport input ssh
!
What am I missing here? Thanks!