Below shows you the commands for creating a read only account on a Cisco PIX firewall.

hostname(config)# username client password 123 privilege 5
hostname(config)# privilege show level 5 command running-config
hostname(config)# privilege show level 5 command startup-config
hostname(config)# privilege show level 5 command access-list
hostname(config)#aaa authentication ssh console LOCAL