Symptom:
Cant configure VTG on privilege level less that 15.

!
privilege controller all level 14 sts-1
privilege configure all level 14 controller
privilege exec level 14 configure terminal
privilege exec level 14 configure
!
line con 0
 login local
!



ASR1K-1#show priv
Current privilege level is 14
ASR1K-1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ASR1K-1(config)#controller soNET 0/0/0
ASR1K-1(config-controller)#sts-1 1
ASR1K-1(config-ctrlr-sts1)#?
Sonet/SDH Configuration Commands
  exit  Exit from Sonet/SDH Path configuration mode
  no    Negate a command or set its defaults

Conditions:
Privilege level < 15 is configured with the right permissions but configuration of VTG is not allowd.