<div dir="ltr">I'm not sure when this command became available in EOS but, at least in 4.14.5F, you will get what you want with:<div><br></div><div><span style="color:rgb(80,0,80);font-size:12.8000001907349px">aaa authorization commands all default group tacacs+ none</span></div><div><font color="#500050"><span style="font-size:12.8000001907349px"><br></span></font><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div>--</div>John Fraizer<div>LinkedIn profile: <a href="http://www.linkedin.com/in/johnfraizer/" target="_blank">http://www.linkedin.com/in/johnfraizer/</a></div><div><br><div><span style="color:rgb(53,53,53);font-family:Arial,sans-serif;font-size:12px;line-height:12px;background-color:rgb(244,244,244)"><br></span></div></div></div></div></div>
<br><div class="gmail_quote">On Thu, Aug 6, 2015 at 1:58 PM,  <span dir="ltr"><<a href="mailto:Kevin.Cruse@instinet.com" target="_blank">Kevin.Cruse@instinet.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">tried that! arista only takes this command with no arguments:<br>
<br>
aaa authorization config-commands<br>
<br>
it still didn't work.<br>
<br>
fyi - i just tried same config with cisco router and it works perfectly,<br>
running 4.13.11M of EOS.<br>
<br>
<br>
<br>
From:   Daniel Schmidt <<a href="mailto:daniel.schmidt@wyo.gov">daniel.schmidt@wyo.gov</a>><br>
To:     <a href="mailto:Kevin.Cruse@instinet.com">Kevin.Cruse@instinet.com</a>,<br>
Cc:     Aaron Wasserott <<a href="mailto:aaron.wasserott@viawest.com">aaron.wasserott@viawest.com</a>>,<br>
            "<a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a>" <<a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a>><br>
Date:   08/06/2015 04:09 PM<br>
Subject:        Re: [tac_plus] Cisco Nexus Authorization problem<br>
<div><div class="h5"><br>
<br>
<br>
This part of the email looks interesting:<br>
<br>
But if you<br>
want them in conf t mode but restrict their commands at that level, you<br>
need to enable something like this:<br>
<br>
aaa authorization config-commands default group myTacacsGroup local<br>
<br></div></div></blockquote></div></div></div></div>