At least one TACACS+ server must be configured on the device using the tacacs-server host command.
You must configure a server-side user role on the TACACS+ server. Refer to Configuring TACACS+ for a mixed-vendor environment for more information.
user = Agnes { global = cleartext "Agnes global password" }