Forum Discussion
Cory_50405
Jun 10, 2014Noctilucent
Remote role configurations will be a must if you want to eliminate the need for local accounts on your BIG-IP appliances. Remote roles pertain to the authorization piece of the remote auth solution.
http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementations_guide_10_1/sol_mgmt_auth.html
I suspect in your case you still have some issue on the ACS side, as it sounds like your TACACS server configuration on the BIG-IP side is correct.