AAA

Guys I am trying to configure AAA on a Cisco router. I want to setup a new level (14) to allow all commands with the exception of "Erase and copy" using LOCAL database (not tacacs+) Ciscos way of doing this seems to be allow basic then configure commands you allow. I need it the other way around as this is a massive list of commands!

Thanks in advance

Graham