TACACS+: Authorization parameter to allow/deny operational commands with regular expressions

You can configure authorizations for operational mode commands by using regular expressions. To do this, set the allow-commands-regexps and deny-commands-regexps statements. You can also configure authorizations remotely by specifying Juniper Networks vendor-specific attributes (VSAs) in your TACACS+ authentication server's configuration.