TACACS+
A Cisco-originated protocol for device administration that authenticates engineers logging into network equipment and authorizes each command they run, with per-session accounting. It is typically served by the same policy server as RADIUS, making that server the authority over who can configure the network.