Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Configure options for local authentication.


To enable password-options, you must configure password under [edit system authentication-order]. The feature does not work in a local fallback scenario because password is not configured under authentication-order for a local fallback scenario.


apply-groups—Choose the groups from which to inherit configuration data.

apply-groups-except—Choose the groups to be excluded from configuration data being inherited.

tacplus-authorization—Configure remote authorization on the TACACS+ server for locally authenticated users. Authorization parameters configured remotely for that user are combined with the authorization parameters configured locally.

  • Default: If a user is authenticated locally, authorization for that user is done locally.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 19.3R1.

Option tacplus-authorization introduced in Junos OS Release 19.3R1 on MX Series routers.