I am not sure but as we do to assign access to L1 and L2 in ASA must be something near about be available in routers also .

We  create privileged level and assign the required commands and allocate user to that privilege level .

Hope this helps .