At least one TACACS+ server must be configured on the device using the tacacs-server host command.
You must configure a server-side user role on the TACACS+ server. Refer to Configuring TACACS+ for a mixed-vendor environment for more information.
user = Agnes {
global = cleartext "Agnes global password"
}