Thanks for your feedback too Pierre, this is something I'll capture in a Knowledge Base Article.
I've also requested an example of the ACS side setup for an AP Admin login from Engineering,
which I don't have for the article. If I email you, can you share an example from your TACACS+
setup?