Please refer to How to insert code / netconf / yang / cli into forum.
You use somewhat nonstandard terminology, I’m only assuming what “show session” or “show user” means. Typically CLI commands like show bgp or show running-config interface require only read access permissions (and conversely, if the user has read permissions, they can run these show commands).
If you want to restrict some show commands for given user while keeping read rights, you may use cmdrule instances to do so.