- Launch ASDM from a privilege 15 account
- Go to Configuration > Device Managment > Users/AAA > AAA Access > Authorization
- Click the button "Set ASDM Defined Roles"
- Select "Yes" to have ASDM configure the necessary Priv 3 and Priv 5 permissions
- Select "Apply" to set the configuration on the firewall