I am pretty sure the CE500 only supports the local database for authentication to manage the switch. I know that there is no option to setup a RADIUS or TACACS authentication from the Web Interface.
The CE500 does support dot1x port authentication and standard port security and those options must be configured through the Network Assistant. So there may be a way to enable alternate management auth from the Network Assistant also but I don't think so.