We have some nexus 9Ks in our environment and I have been testing out the NX-API functionality. One of the things I've noticed is that command authorization in tacacs really seems to have an effect. Especially as it pertains to configuration commands. I've disabled the authorization command in tacacs and now I am able to make configurations changes through the api. The way I wrote the script I'm using my own tacacs user creds so my thought was that the privileges should have been there.
I will do more digging, being new to using APIs I didn't know what to expect when it came to command authorization. Honestly I didn't fully understand what an API configuring the box would look like from the devices perspective.
Curious if anyone has had a similar experience?
Thanks.
Todd