Before you configure a login class:
Consider that you can issue one allow statement and one deny statement for operation mode commands, and one allow statement and one deny statement for configuration mode commands. Use regular expressions in a statement to specify more than one command in a statement.
See Access to Individual Commands and Configuration Statements (SRC CLI).