IOS TACACS+ Command Authorization

[jonathan.cuthbert]

I prefer using custom method lists for exactly this reason. And custom AAA group names.  It just makes it easier to read. 

I'm not sure what you are auth-ing against, but many require accounting.  Do you have accounting enabled?

[Todd S]

I am auth-ing against ISE.  What I have above is my complete AAA configuration.