Reference Guide
...
Basic Configurations for TACAC...
Adding RADIUS/TACACS+ Attributes
instead of using black key or white key policies, tacacs+ and radius supporting devices can use attribute value pairs (avp) as preset policies these avps can be defined using the web gui to define tacacs+ and radius attributes navigate to policy control > session policy type in the key (text before the first space is considered an attribute key text between the first and second space is considered an operand text after the second space is considered an attribute value), and description select radius/tacacs+ attribute as the type select the element types to add the attribute to click save cisco ios avps example cisco avpair = shell\ priv lvl=1 service type = nas prompt user