InformationDefines the source of authorization for the commands entered by an administrator/user
Requiring authorization for commands enforces separation of duties and provides least privilege access for specific job roles.
SolutionRun the following to determine the remote the TACACS+/RADIUS servers (server_group_name) as source of authorization and the local database (LOCAL) as fallback method if the remote servers are not available.
HOSTNAME(CONFIG)# AAA AUTHORIZATION COMMAND _<server-group_name>_ LOCAL
This implies that locally, each privilege has its sets of commands configured and username associated just in accordance with the privilege and command definition in the remote servers.