Catalyst APs: SSH and login with RADIUS (instead of local admin user)?

[coolbreeze]

Scenario: a catalyst 9800 controller and catalyst series APs.  In the controller, is a custom AP join profile.

Historically (on AirOS 5508 controller for example), to SSH to an AP the login credentials were configured either in a global AP profile or per AP as needed from on the controller, but the only option was local administrator user configuration, e.g. username "company-admin" with password and enable secret.

In the catalyst 9800 controller AP profile, there is the same area for AP management with user, with a local admin username we configured (see first screenshot).

QUESTIONS:  Is there a way to SSH log into the APs with RADIUS admin credentials instead of local only?
And/or can someone demystify what this "Management -> Credentials -> Dot1X Credentials" spot does (see second screen shot)?  Haven't been able to find literature with the information I am looking for to answer these questions.

Thanks!

[Mark Elsen · Accepted solution]

  - @coolbreeze    Ref : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217848-configure-802-1x-supplicant-for-access-p.html
                            The 'dot1x username' only applies when configuring a Cisco Access Point (AP) as a 802.1x supplicant to be authorized on a switchport against a RADIUS server.
                              You can not use Radius for  the local ssh and telnet credentials
 
 M.

[MHM Cisco World · Accepted solution]

1- you can not use AAA server to authc access to AP
2- dot1x is way  to authc AP to WLC 

MHM

[coolbreeze]

Thanks @Mark Elsen  and @MHM Cisco World that was what I was looking for!

Solution marked and helpful posts voted.  Thanks again