A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to
authenticate managers on its AOS-CX switches. The company wants CPPM to control which commands
managers are allowed to enter. Which service must you add to the managers' TACACS+ enforcement profile?