Think I've figured this out myself! . I set each Orion NCM user to use "individual user level" credentials (I'm using radius for user auth/priv so our customers are already restricted to LVL 7)
Then in NCM, Configuration Management, Execute Script. I simply entered the show commands I need..
Works really well..
Cheers
Matt