We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc.,

What is the minimum enable level we need to grant to the service account? If the answer is too subjective, I atleast want to know what is the minimum enable required for Cisco IOS devices.


You can use the command: privilege exec level 6 show running

user joe pass whatever priv 6

joe should be able to do the show run config command

  • 3
    To expand on this; the more system:running-config command may be more appropriate for backups since it fully reports some of the encryption key and password information that's otherwise obscured in a standard show running-config. If you're using a tool like RANCID, the set of commands that it wants to run is significantly larger, as well. – Shane Madden Jun 15 '11 at 17:00
  • If I understand correctly, we are assigning custom privilege levels to restrict permitted commands that can be run. Is there anything similar for Juniper equipments? that is the only other major equipment that I am maintaining. – Benny Jun 15 '11 at 18:59

As far as I know, enable/privilegie level 15 is required.


For Juniper, you must be super-user class I believe:

set system login user username class super-user

this will do the trick.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.