Yes, you can configure different “Privilege Level” for different users. If the user’s privilege level is lower than group’s privilege level, the user doesn’t have permission to modify the group’s setting.

CLI command: (Suppose to create a new account/password “TESTER” with user privilege level 5, and the user only has permission to modify the System group settings. )

Switch# account

Switch(account)# add 5 TESTER TESTER

Switch(account)# exit

Switch# privilege

Switch(privilege)# group system 5

Note: For the example, all groups’ need to have higher privilege level than 5 except the “System” group.